Lucene search
Veracode Vulnerability DatabaseVERACODE:36188HistoryJun 28, 2022 - 6:50 p.m.
Server-Side Request Forgery
2022-06-2818:50:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.001 Low
EPSS
Percentile
30.0%
Dompdf is vulnerable to Information disclosure. The vulnerability exists when reading files using file_get_contents over http. If theres 302 response, it will allow a redirect to a blacklisted site.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dompdf/dompdf | le | v1.2.2 | |
| dompdf/dompdf | le | v1.2.2 |
Related
nvd
nvd
CVE-2022-0085
2022-06-28 15:15:08
debiancve
debiancve
CVE-2022-0085
2022-06-28 15:15:08
osv
osv
Server-Side Request Forgery in dompdf/dompdf
2022-06-29 00:00:27
CVE-2022-0085
2022-06-28 15:15:08
friendsofphp
friendsofphp
Server-Side Request Forgery in dompdf/dompdf
2022-06-23 13:55:00
cvelist
cvelist
CVE-2022-0085 Server-Side Request Forgery (SSRF) in dompdf/dompdf
2022-06-28 15:00:15
ubuntucve
ubuntucve
CVE-2022-0085
2022-06-28 00:00:00
prion
prion
Server side request forgery (ssrf)
2022-06-28 15:15:00
huntr
huntr
Server-Side Request Forgery (SSRF) in dompdf/dompdf
2022-01-02 05:58:51
cve
cve
CVE-2022-0085
2022-06-28 15:15:08
github
github
Server-Side Request Forgery in dompdf/dompdf
2022-06-29 00:00:27