Skip to content

DOMPDF Remote File Inclusion Vulnerability

High severity GitHub Reviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Apr 25, 2024

Package

composer dompdf/dompdf (Composer)

Affected versions

>= 0.6, < 0.6.1

Patched versions

0.6.1

Description

PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the input_file parameter.

References

Published by the National Vulnerability Database Oct 7, 2011
Published to the GitHub Advisory Database May 17, 2022
Reviewed Apr 25, 2024
Last updated Apr 25, 2024

Severity

High

EPSS score

0.546%
(78th percentile)

Weaknesses

CVE ID

CVE-2010-4879

GHSA ID

GHSA-48r9-4v93-x4wh

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.