GoogleOSV:CVE-2022-0085

HistoryJun 28, 2022 - 3:15 p.m.

CVE-2022-0085

2022-06-2815:15:08

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.0%

JSON

Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.

CPENameOperatorVersion
dompdfeq0.6.0-b3
dompdfeq0.8.1
dompdfeq1.2.0
dompdfeq1.1.1
dompdfeq1.0.1
dompdfeq0.7.0-beta3
dompdfeq0.6.1
dompdfeq0.8.0
dompdfeq0.7.0
dompdfeq0.6.2

Name	Operator	Version
dompdf	eq	0.6.0-b3
dompdf	eq	0.8.1
dompdf	eq	1.2.0
dompdf	eq	1.1.1
dompdf	eq	1.0.1
dompdf	eq	0.7.0-beta3
dompdf	eq	0.6.1
dompdf	eq	0.8.0
dompdf	eq	0.7.0
dompdf	eq	0.6.2

Rows per page:

1-10 of 231

References

github.com/dompdf/dompdf/commit/bb1ef65011a14730b7cfbe73506b4bb8a03704bd

huntr.dev/bounties/73dbcc78-5ba9-492f-9133-13bbc9f31236