Em resumo
- CVE-2024-51058 é uma vulnerabilidade MÉDIO (CVSS 6.2) que afeta tecnickcom/tcpdf, tcpdf (tcpdf project).
- Chance de exploração nos próximos 30 dias (EPSS): 0.81%, maior que 57.0% das vulnerabilidades.
- Correção: atualize para 6.7.6 ou posterior.
Description
Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from the server's file system through <img> src tag, potentially exposing sensitive information.
NVD description
Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from the server's file system through <img> src tag, potentially exposing sensitive information.
Mais vulnerabilidades de tecnickcom/tcpdf
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free