Lucene search

K
osvGoogleOSV:GHSA-MX3P-FHPW-X6RV
HistoryApr 19, 2024 - 6:31 p.m.

TCPDF vulnerable to Regular Expression Denial of Service

2024-04-1918:31:11
Google
osv.dev
4
tcpdf
vulnerability
redos
parsing
html
untrusted
version <=6.7.4

5.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

TCPDF version <= 6.7.4 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.

5.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%