logo

Database

Lack of data validation - Path Traversal In tcpdf

Description

tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2017-61002. NVD-2017-61003. OSV-DEBIAN-2017-61004. OSV-2017-61005. SECURITY-TRACKER-CVE-2017-6100

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.