Опубликовано: 14 сент. 2018
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS2: 7.5
CVSS3: 9.8
Описание
An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | not-affected | 6.5.0+dfsg1-1 |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-apps/bionic | needed | |
| esm-apps/focal | needed | |
| esm-apps/jammy | needed | |
| esm-apps/noble | not-affected | 6.5.0+dfsg1-1 |
| esm-apps/xenial | needed |
Показывать по
10
EPSS
Процентиль: 98%
0.59386
Средний
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
CVSS3: 9.8
nvd
больше 7 лет назад
An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.
CVSS3: 9.8
debian
больше 7 лет назад
An issue was discovered in TCPDF before 6.2.22. Attackers can trigger ...
CVSS3: 9.8
github
больше 3 лет назад
TCPDF vulnerable to attackers triggering deserialization of arbitrary data
EPSS
Процентиль: 98%
0.59386
Средний
7.5 High
CVSS2
9.8 Critical
CVSS3