Lucene search
Veracode Vulnerability DatabaseVERACODE:34939HistoryApr 04, 2022 - 7:50 a.m.
Remote Code Execution (RCE)
2022-04-0407:50:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
0.161 Low
EPSS
Percentile
96.0%
Dompdf is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the font type via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML input file).
| CPE | Name | Operator | Version |
|---|---|---|---|
| dompdf/dompdf | le | v1.2.0 | |
| dompdf/dompdf | le | v1.2.0 |
Related
friendsofphp
friendsofphp
Remote code injection via remote fonts
2022-03-24 13:59:00
cve
cve
CVE-2022-28368
2022-04-03 03:15:08
prion
prion
Input validation
2022-04-03 03:15:00
nvd
nvd
CVE-2022-28368
2022-04-03 03:15:08
github
github
Remote code injection in dompdf/dompdf
2022-04-04 00:00:55
zdt
zdt
Dompdf 1.2.1 - Remote Code Execution Exploit
2023-04-06 00:00:00
ubuntucve
ubuntucve
CVE-2022-28368
2022-04-03 00:00:00
cvelist
cvelist
CVE-2022-28368
2022-04-03 00:00:00
debiancve
debiancve
CVE-2022-28368
2022-04-03 03:15:08
osv
osv
CVE-2022-28368
2022-04-03 03:15:08
Remote code injection in dompdf/dompdf
2022-04-04 00:00:55
githubexploit
githubexploit
Exploit for Cross-site Scripting in Dompdf Project Dompdf
2023-02-13 08:10:00
Exploit for Cross-site Scripting in Dompdf Project Dompdf
2023-04-28 09:49:05
packetstorm
packetstorm
Dompdf 1.2.1 Remote Code Execution
2023-04-06 00:00:00
exploitdb
exploitdb
Dompdf 1.2.1 - Remote Code Execution (RCE)
2023-04-06 00:00:00