GitHub Advisoryadvisory · Packagist
GHSA-pf6p-25r2-fx45 Server-Side Request Forgery in dompdf/dompdf
MEDIUM
Official page ↗
- Aliases
- CVE-2022-0085
- Ecosystem
- Packagist
- Packages
- dompdf/dompdf
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-918
- Reviewed
- 2022-07-05
Affected packages
• Packagist dompdf/dompdf: < 2.0.0 → fixed in 2.0.0
Description
Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.
Related
Alias · CVE (1)
- CVE-2022-0085 Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0. vulnerability
Weakness · CWE (1)
- CWE-918 Server-Side Request Forgery weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2022-0085 advisory
- https://github.com/dompdf/dompdf/commit/bb1ef65011a14730b7cfbe73506b4bb8a03704bd web
- https://github.com/FriendsOfPHP/security-advisories/blob/master/dompdf/dompdf/CVE-2022-0085.yaml web
- https://github.com/dompdf/dompdf package
- https://huntr.dev/bounties/73dbcc78-5ba9-492f-9133-13bbc9f31236 web