Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-41343
HistorySep 25, 2022 - 7:15 p.m.

Remote file inclusion

2022-09-2519:15:00
PRIOn knowledge base
www.prio-n.com
4
dompdf
registerfont
vulnerability
remote file inclusion
fontmetrics.php
nvd

0.003 Low

EPSS

Percentile

65.9%

registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule.

CPENameOperatorVersion
dompdflt2.0.1

0.003 Low

EPSS

Percentile

65.9%