Dompdf Project: >> Dompdf >> 1.0.2 Security Vulnerabilities
External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.
CVSS Score
5.3
EPSS Score
0.011
Published
2022-07-18
Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.
CVSS Score
3.7
EPSS Score
0.01
Published
2022-06-28
Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML input file).
CVSS Score
9.8
EPSS Score
0.824
Published
2022-04-03
Page 2