Dompdf allows remote file inclusion because URI validation failure does not halt font registration

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-41343 · ADVISORY
• dompdf/dompdf · WEB
• dompdf/dompdf#2995 · WEB
• dompdf/dompdf commit 66431c5 · WEB
• FriendsOfPHP/security-advisories · WEB
• GitHub Advisory GHSA-6x28-7h8c-chx4 · ADVISORY
• dompdf/dompdf · PACKAGE
• dompdf/dompdf release v2.0.1 · WEB
• tantosec.com/blog/cve-2022-41343 · WEB
• tantosec.com/blog/cve-2022-41343 · Exploit

Lỗ hổng khác của dompdf/dompdf

• CVE-2026-59943TRUNG BÌNH 5.3Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering b…
• CVE-2026-59942CAO 7.5Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service (DoS) attack via resource exhausti…
• CVE-2026-59941CAO 7.5Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its …
• CVE-2026-56722TRUNG BÌNH 5.3Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction…
• CVE-2026-55555CAO 7.5Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulatio…