Executive brief
Dompdf allows remote file inclusion because URI validation failure does not halt font registration
Affected products
- Packagist dompdf/dompdf
Junglewise Threat Intelligence
CVE-2022-41343: Dompdf allows remote file inclusion because URI validation failure does not halt font registration
CVE-2022-41343 · Severity: low · CVSS 3.1 · Published 2022-09-26
Technologies: dompdf/dompdf (Packagist). Vendors: Packagist.