Lucene search
+L

1353 matches found

NVD
NVD
added 2023/02/07 7:15 p.m.40 views

CVE-2023-24813

Dompdf is an HTML to PDF converter written in php. Due to the difference in the attribute parser of Dompdf and php-svg-lib, an attacker can still call arbitrary URLs with arbitrary protocols. Dompdf parses the href attribute of image tags and respects xlink:href even if href is specified. However...

10CVSS9.7AI score0.0249EPSS
SaveExploits3References2
UbuntuCve
UbuntuCve
added 2023/02/07 7:15 p.m.39 views

CVE-2023-24813

Dompdf is an HTML to PDF converter written in php. Due to the difference in the attribute parser of Dompdf and php-svg-lib, an attacker can still call arbitrary URLs with arbitrary protocols. Dompdf parses the href attribute of image tags and respects xlink:href even if href is specified. However...

10CVSS7.4AI score0.0249EPSS
SaveExploits3References3
Github Security Blog
Github Security Blog
added 2023/02/07 6:16 p.m.60 views

URI validation failure on SVG parsing. Bypass of CVE-2023-23924

Summary Due to the difference in the attribute parser of Dompdf and php-svg-lib, an attacker can still call arbitrary URLs with arbitrary protocols. Details Dompdf parses the href attribute of image tags with the following code: src/Image/Cache.php line 135-150 php function $parser, $name,...

10CVSS9.3AI score0.03572EPSS
SaveExploits3References4Affected Software1
NVD
NVD
added 2023/02/06 8:15 p.m.25 views

CVE-2022-4489

The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...

7.2CVSS7.1AI score0.01313EPSS
SaveExploits2References1
Huntr
Huntr
added 2023/02/02 3:11 a.m.26 views

Restrictive composer.json makes Dompdf vulnerable to URI validation failure on SVG parsing

Description The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing tags with uppercase letters. This might lead to arbitrary object unserialize on PHP tags, in src/Image/Cache.php: if $type === "svg" $parser = xmlparsercreate"utf-8"; xmlparsersetoption$parser,...

6.4AI score
SaveExploits0References2
OSV
OSV
added 2023/02/01 1:37 a.m.35 views

GHSA-3CW5-7CXW-V5QG Dompdf vulnerable to URI validation failure on SVG parsing

Summary The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing tags with uppercase letters. This might leads to arbitrary object unserialize on PHP tags, in src/Image/Cache.php : if $type === "svg" $parser = xmlparsercreate"utf-8"; xmlparsersetoption$parser,...

10CVSS9.4AI score0.03572EPSS
SaveExploits2References7
NVD
NVD
added 2023/02/01 12:15 a.m.32 views

CVE-2023-23924

Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing tags with uppercase letters. This may lead to arbitrary object unserialize on PHP 8, through the phar URL wrapper. An attacker can exploit the vulnerability to call arbitrary URL with...

10CVSS9.5AI score0.03572EPSS
SaveExploits2References3
Prion
Prion
added 2023/02/01 12:15 a.m.23 views

Remote code execution

Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing tags with uppercase letters. This may lead to arbitrary object unserialize on PHP 8, through the phar URL wrapper. An attacker can exploit the vulnerability to call arbitrary URL with...

7.5CVSS9.5AI score0.03572EPSS
SaveExploits2References3Affected Software1
UbuntuCve
UbuntuCve
added 2023/02/01 12:15 a.m.31 views

CVE-2023-23924

Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing tags with uppercase letters. This may lead to arbitrary object unserialize on PHP 8, through the phar URL wrapper. An attacker can exploit the vulnerability to call arbitrary URL with...

10CVSS7.3AI score0.03572EPSS
SaveExploits2References4
CVE
CVE
added 2023/01/31 11:54 p.m.113 views

CVE-2023-23924

Dompdf 2.0.1 is vulnerable to URI validation bypass during SVG parsing. If an attacker provides an SVG containing an tag with uppercase letters, the parser may bypass protection and allow arbitrary URL calls via the phar wrapper. In PHP

10CVSS9.4AI score0.03572EPSS
SaveExploits2References3Affected Software1
Debian CVE
Debian CVE
added 2023/01/31 11:54 p.m.103 views

CVE-2023-23924

Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing tags with uppercase letters. This may lead to arbitrary object unserialize on PHP 8, through the phar URL wrapper. An attacker can exploit the vulnerability to call arbitrary URL with...

10CVSS9.6AI score0.03572EPSS
SaveExploits2
OSV
OSV
added 2023/01/31 11:54 p.m.26 views

CVE-2023-23924 URI validation failure on SVG parsing in Dompdf

Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing tags with uppercase letters. This may lead to arbitrary object unserialize on PHP 8, through the phar URL wrapper. An attacker can exploit the vulnerability to call arbitrary URL with...

10CVSS9AI score
SaveExploits0References5
Cvelist
Cvelist
added 2023/01/31 11:54 p.m.84 views

CVE-2023-23924 URI validation failure on SVG parsing in Dompdf

Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing tags with uppercase letters. This may lead to arbitrary object unserialize on PHP 8, through the phar URL wrapper. An attacker can exploit the vulnerability to call arbitrary URL with...

10CVSS9.7AI score0.03572EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2023/01/31 11:54 p.m.9 views

CVE-2023-23924 URI validation failure on SVG parsing in Dompdf

Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing tags with uppercase letters. This may lead to arbitrary object unserialize on PHP 8, through the phar URL wrapper. An attacker can exploit the vulnerability to call arbitrary URL with...

10CVSS9.7AI score0.03572EPSS
SaveExploits2References3
Friends Of PHP
Friends Of PHP
added 2023/01/31 2:30 p.m.34 views

Dompdf vulnerable to URI validation failure on SVG parsing

Summary The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing tags with uppercase letters. This might leads to arbitrary object unserialize on PHP tags, in src/Image/Cache.php : if $type === "svg" $parser = xmlparsercreate"utf-8"; xmlparsersetoption$parser,...

10CVSS9.4AI score0.03572EPSS
SaveExploits2Affected Software1
Cvelist
Cvelist
added 2023/01/23 2:31 p.m.42 views

CVE-2022-4323 Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...

7.2AI score0.01046EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2023/01/23 2:31 p.m.40 views

CVE-2022-3425 Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...

7.3AI score0.01046EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2023/01/16 12:0 a.m.5 views

WordPress plugin Anti-Malware Security and Brute-Force Firewall 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

5.7AI score
SaveExploits1References2
NVD
NVD
added 2023/01/14 2:15 a.m.36 views

CVE-2023-22850

Tiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object Injection because of an unserialize call...

8.8CVSS8.9AI score0.01168EPSS
SaveExploits3References2
Prion
Prion
added 2023/01/14 2:15 a.m.24 views

Code injection

Tiki before 24.2 allows lib/importer/tikiimporterblogwordpress.php PHP Object Injection by an admin because of an unserialize call...

5.8CVSS7.2AI score0.01048EPSS
SaveExploits3References2Affected Software1
Rows per page
Query Builder