CVE-2020-7762: 
JavaScript vulnerability analysis and mitigation

The vulnerability CVE-2020-7762 affects the package jsreport-chrome-pdf before version 1.10.0. This security issue was discovered in 2020 and relates to file access control (MITRE CVE).

The vulnerability exists in the file request handling mechanism of jsreport-chrome-pdf. The issue allows potentially dangerous requests to local files through the file:/// protocol, which could lead to unauthorized file access. The fix involves implementing request interception and blocking file requests that are not relative to the HTML URL (GitHub Commit).

The vulnerability could allow attackers to access local files on the system where jsreport-chrome-pdf is running, potentially exposing sensitive information or system files (MITRE CVE).

The vulnerability requires the attacker to have access to the jsreport-chrome-pdf functionality and the ability to make specific file requests using the file:/// protocol (GitHub Commit).

The vulnerability has been fixed in version 1.10.0 of jsreport-chrome-pdf. Users should upgrade to this version or later to mitigate the security risk. The fix implements request interception to block potentially dangerous file requests (GitHub Commit).