Lucene search

K

[email protected]CVE-2024-22640

HistoryApr 19, 2024 - 4:15 p.m.

CVE-2024-22640

2024-04-1916:15:09

[email protected]

web.nvd.nist.gov

61

tcpdf version

redos vulnerability

untrusted html page

crafted color

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.

References

github.com/tecnickcom/TCPDF

github.com/zunak/CVE-2024-22640

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LIB3R2WB7XPW2I4PGVMZ3VLFLRHOK4RB/

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

Related for CVE-2024-22640

fedora1 ubuntucve1 github1 osv1 nessus1 mageia1 openvas2 cvelist1 nvd1 debiancve1 veracode1