Описание
An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| tcpdf | fixed | 6.8.0+dfsg-1 | package | |
| tcpdf | no-dsa | bookworm | package | |
| tcpdf | postponed | bullseye | package |
Примечания
Fixed by: https://github.com/tecnickcom/TCPDF/commit/aab43ab0a824e956276141a28a24c7c0be20f554 (6.8.0)
EPSS
Процентиль: 40%
0.00186
Низкий
Связанные уязвимости
CVSS3: 9.8
ubuntu
около 1 года назад
An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely.
CVSS3: 9.8
nvd
около 1 года назад
An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely.
EPSS
Процентиль: 40%
0.00186
Низкий