Dompdf Project: >> Dompdf >> 0.5.2 Security Vulnerabilities
External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.
CVSS Score
5.3
EPSS Score
0.011
Published
2022-07-18
Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.
CVSS Score
3.7
EPSS Score
0.01
Published
2022-06-28
Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML input file).
CVSS Score
9.8
EPSS Score
0.824
Published
2022-04-03
DOMPDF before 0.6.2 allows Information Disclosure.
CVSS Score
6.5
EPSS Score
0.016
Published
2020-01-10
DOMPDF before 0.6.2 allows denial of service.
CVSS Score
6.5
EPSS Score
0.013
Published
2020-01-10
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383.
CVSS Score
8.8
EPSS Score
0.046
Published
2020-01-10
Page 2