Dompdf 安全漏洞

Dompdf is an HTML to PDF converter. A security vulnerability exists in versions prior to Dompdf 2.0.1, which stems from a URI validation failure does not stop font registration...

CVE-2022-41343

registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule...

PT-2022-25819 · Dompdf · Dompdf

Name of the Vulnerable Software and Affected Versions: Dompdf versions prior to 2.0.1 Description: The issue allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule. This is related to the registerFont function in...