Filtered by vendor Dompdf Subscriptions
Filtered by product Dompdf Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2014-2383 1 Dompdf 1 Dompdf 2024-11-21 N/A
dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.
CVE-2021-3902 2 Dompdf, Dompdf Project 2 Dompdf, Dompdf 2024-11-19 9.8 Critical
An improper restriction of external entities (XXE) vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery (SSRF) and deserialization attacks. This issue affects all versions prior to 2.0.0. The vulnerability can be exploited even if the isRemoteEnabled option is set to false. It allows attackers to perform SSRF, disclose internal image files, and cause PHAR deserialization attacks.
CVE-2021-3838 2 Dompdf, Dompdf Project 2 Dompdf, Dompdf 2024-11-19 9.8 Critical
DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the file_get_contents() function. An attacker who can upload files of any type to the server can pass in the phar:// protocol to unserialize the uploaded file and instantiate arbitrary PHP objects. This can lead to remote code execution, especially when DOMPdf is used with frameworks with documented POP chains like Laravel or vulnerable developer code.