Описание
registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was not-affected |
| devel | DNE | |
| esm-apps/bionic | not-affected | code not present |
| esm-apps/focal | not-affected | code not present |
| esm-apps/jammy | not-affected | code not present |
| esm-apps/xenial | not-affected | code not present |
| focal | not-affected | code not present |
| jammy | not-affected | code not present |
| kinetic | not-affected | code not present |
| lunar | DNE |
Показывать по
10
7.5 High
CVSS3
Связанные уязвимости
CVSS3: 7.5
nvd
больше 3 лет назад
registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule.
CVSS3: 7.5
debian
больше 3 лет назад
registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote f ...
CVSS3: 7.5
github
больше 3 лет назад
Dompdf allows remote file inclusion because URI validation failure does not halt font registration
7.5 High
CVSS3