CVE-2024-51058

Published November 26th, 2024

View on NVD ↗

CVSS v3

6.2

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from the server's file system through <img> src tag, potentially exposing sensitive information.

tecnickcom/TCPDF

Deprecated: PHP PDF library, superseded by tc-lib-pdf (https://github.com/tecnickcom/tc-lib-pdf)

GitHub

4.54K

saravana-hackz/vulnerability-research

CVE

GitHub