CVE-2022-2400

Description

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://huntr.dev/bounties/a6da5e5e-86be-499a-a3c3-2950f749202a ↗
• https://github.com/dompdf/dompdf/commit/99aeec1efec9213e87098d42eb09439e7ee0bb6a ↗
• https://lists.debian.org/debian-lts-announce/2023/07/msg00017.html ↗