Lucene search
K

Remote code injection via remote fonts

🗓️ 24 Mar 2022 13:59:00Reported by OpenJS FoundationType 
friendsofphp
 friendsofphp
🔗 github.com👁 28 Views

Dompdf HTML to PDF converter allows remote code execution via remote font

Related
Detection
ReporterTitlePublishedViews
Family
0day.today
Dompdf 1.2.1 - Remote Code Execution Exploit
6 Apr 202300:00
zdt
GithubExploit
Exploit for Cross-site Scripting in Dompdf_Project Dompdf
13 Feb 202308:10
githubexploit
GithubExploit
Exploit for Cross-site Scripting in Dompdf_Project Dompdf
28 Apr 202309:49
githubexploit
ATTACKERKB
CVE-2022-28368
3 Apr 202203:15
attackerkb
Circl
CVE-2022-28368
3 Apr 202207:21
circl
CNNVD
Dompdf 跨站脚本漏洞
3 Apr 202200:00
cnnvd
CVE
CVE-2022-28368
3 Apr 202200:00
cve
Cvelist
CVE-2022-28368
3 Apr 202200:00
cvelist
Debian CVE
CVE-2022-28368
3 Apr 202200:00
debiancve
Exploit DB
Dompdf 1.2.1 - Remote Code Execution (RCE)
6 Apr 202300:00
exploitdb
Rows per page
Vulners
Node
dompdfdompdfRange<1.2.1

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

24 Mar 2022 13:59Current
9.5High risk
Vulners AI Score9.5
CVSS 27.5
CVSS 3.19.8
EPSS0.88271
28