Lucene search

K
cvelistMitreCVELIST:CVE-2022-41343
HistorySep 25, 2022 - 12:00 a.m.

CVE-2022-41343

2022-09-2500:00:00
mitre
www.cve.org
1
dompdf
fontmetrics.php
remote file inclusion

0.003 Low

EPSS

Percentile

65.9%

registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule.

0.003 Low

EPSS

Percentile

65.9%