Executive brief
Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE
Affected products
- Packagist phenx/php-svg-lib
Junglewise Threat Intelligence
Severity: low · CVSS 3.1 · Published 2024-02-22
Technologies: phenx/php-svg-lib (Packagist). Vendors: Packagist.
Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE