3 matches found
Deserialization of Untrusted Data
Overview pontedilana/php-weasyprint is a PHP library allowing PDF generation from an url or a html page. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the prepareOutput method of src/AbstractGenerator.php, whose strpos$filename, 'phar://' guard is case...
9.2CVSS6.6AI score0.0095EPSS
SaveExploits0References2
20