CyberRota Analysis
AI-GeneratedWeasyPrint versions prior to 69.0 are vulnerable to CSS injection due to the improper handling of unescaped HTML presentational-hint attribute values, which can lead to the execution of untrusted CSS declarations. This vulnerability can allow attackers to manipulate styles and potentially execute server-side requests through injected URL values when rendering untrusted HTML. Developers utilizing WeasyPrint for PDF generation, particularly those enabling presentational hints, should prioritize upgrading to version 69.0 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/__init__.py when presentational_hints=True. The background attribute is inserted into a background-image:url() declaration and parsed by tinycss2.parse_blocks_contents(), allowing untrusted HTML to inject additional CSS declarations. Applications that render untrusted HTML with presentational hints enabled can be affected by CSS injection and server-side requests through injected url() values. This issue is fixed in version 69.0.