~ / search / GHSA-rmv2-8jjc-23xw

GHSA-rmv2-8jjc-23xw

TCPDF Local File Inclusion vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-51058

Packages

EcosystemPackageAffectedFixed in
Packagist tecnickcom/tcpdf < 6.7.6 6.7.6

Details

As written in the advisory (Markdown source, shown as plain text).

Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from the server's file system through <img> src tag, potentially exposing sensitive information.

References

External links from the advisory. They lead to third-party sites.