Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2020-21365
CVE-2020-21365:
NixOS vulnerability analysis and mitigation
Overview
Directory traversal vulnerability in wkhtmltopdf through version 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted HTML file running with default configurations. The vulnerability was assigned CVE-2020-21365 and was discovered in November 2019 (GitHub Issue).
Technical details
The vulnerability exists due to insufficient same-origin policy restrictions in wkhtmltopdf, which allows HTML files under the file domain to read any local files on the system. The vulnerability has been assigned a CVSS v3.1 Base Score of 7.5 (HIGH) with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. The issue is tracked as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) (NVD Database).
Impact
An attacker can exploit this vulnerability by crafting a malicious HTML file that uses XMLHttpRequest to read local system files. When this HTML file is processed by wkhtmltopdf, it can access and expose sensitive information from the local filesystem, such as /etc/passwd and other critical system files (GitHub Issue).
Mitigation and workarounds
The vulnerability has been fixed in version 0.12.6 by disabling local filesystem access by default. For systems that require local filesystem access, it can be explicitly enabled using the --enable-local-file-access or --allow options. Debian 10 users can update to version 0.12.5-1+deb10u1 which includes the security fix (Debian Advisory).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management