DHTMLX PDF Export Module Path Traversal Vulnerability

A path traversal vulnerability has been identified in the PDF Export Module of DHTMLX's Gantt and Scheduler products, affecting versions 0.3.3 prior to 0.7.6. The vulnerability arises from inadequate HTML sanitization, allowing an unauthenticated user to craft an HTML payload that could include local files from the server, which would then be displayed in the generated PDF.

Impact

Exploitation of this vulnerability allows for unauthorized access to local files on the server, which could be read and potentially misused.

Remediation

Users can upgrade to PDF Export Module version 0.7.6 to address this vulnerability.