2 matches found
CVE-2022-50897
mPDF 7.0 is affected by a local file inclusion through crafted annotation file parameters, allowing reading arbitrary system files via URL-encoded or base64 payloads. Root cause: annotation content that specifies file paths enables LFI. Impact is high on confidentiality; no explicit exploit detai...
8.7CVSS6.2AI score0.00471EPSS
SaveExploits1References3Affected Software1
20