CVE-2022-28368

Published April 3rd, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECTS

Description

Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML input file).

dompdf/dompdf

HTML to PDF converter for PHP

GitHub

11.1K

snyk-labs/php-goof

Snyk PHP Goof - A vulnerable PHP demo application

GitHub

dompdf/dompdf

DOMPDF is a CSS 2.1 compliant HTML to PDF converter

Packagist

184M