logo

Database

Server side template injection In dompdf/dompdf

Description

DOMPDF Remote Code Execution DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2014-50132. NVD-2014-50133. OSV-2014-50134. OSV-DEBIAN-2014-50135. GCVE-2014-50136. SECURITY-TRACKER-CVE-2014-5013

References

1. https://github.com/FriendsOfPHP/security-advisories/blob/master/dompdf/dompdf/CVE-2014-5013.yaml2. https://github.com/dompdf/dompdf/compare/v0.6.1...v0.6.23. https://github.com/dompdf/dompdf/releases/tag/v0.6.2

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.