VULNERABILITY INTELLIGENCE

CVE-2024-1648

CVSS score7.5 HIGH

EPSS probability0.69%

CISA KEVNot currently listed

Published2024-02-20

Last modified2026-06-17

Description

electron-pdf version 20.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the HTML content entered by the user.