Описание
mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulating annotation file parameters. Attackers can generate URL-encoded or base64 payloads to include local files through crafted annotation content with file path specifications.
Ссылки
- Product
- Exploit
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:mpdf_project:mpdf:7.0.0:-:*:*:*:*:*:*
EPSS
Процентиль: 6%
0.00023
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-98
Связанные уязвимости
CVSS3: 6.2
github
25 дней назад
mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulating annotation file parameters. Attackers can generate URL-encoded or base64 payloads to include local files through crafted annotation content with file path specifications.
EPSS
Процентиль: 6%
0.00023
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-98