CVE-2021-45394

2022-01-1812:15:08

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.0%

JSON

An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious <link> tag in the converted HTML document.

CPENameOperatorVersion
html2pdfeq5.2.3
html2pdfeq5.2.0
html2pdfeq5.1.0
html2pdfeq5.0.0
html2pdfeq4.4.0
html2pdfeq5.0.1
html2pdfeq5.2.1
html2pdfeq5.2.2