Dompdf before v2.0.0 vulnerable to chroot check bypass

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-2400 · ADVISORY
• dompdf/dompdf commit 99aeec1 · WEB
• dompdf/dompdf · PACKAGE
• huntr.dev/bounties/a6da5e5e-86be-499a-a3c3-2950f749202a · WEB
• lists.debian.org/debian-lts-announce/2023/07/msg00017.html · WEB

dompdf/dompdf의 다른 취약점

• CVE-2026-59943보통 5.3Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering b…
• CVE-2026-59942높음 7.5Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service (DoS) attack via resource exhausti…
• CVE-2026-59941높음 7.5Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its …
• CVE-2026-56722보통 5.3Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction…
• CVE-2026-55555높음 7.5Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulatio…