Tcpdf Project
Tcpdf Project Tcpdf: vulnerabilidades y CVE
Tcpdf Project Tcpdf tiene 9 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE9
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-56527 | Alta (7.5) | 0.77% | — | 27 dic 2024 | An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message. |
| CVE-2024-56522 | Alta (7.5) | 0.63% | — | 27 dic 2024 | An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF tag hashes. |
| CVE-2024-56521 | Crítica (9.8) | 0.79% | — | 27 dic 2024 | An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely. |
| CVE-2024-56519 | Alta (7.5) | 0.64% | — | 27 dic 2024 | An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute. |
| CVE-2024-51058 | Media (6.2) | 0.81% | — | 26 nov 2024 | Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from the server's file system through <img> src tag, potentially exposing sensitive… |
| CVE-2024-22641 | Alta (7.5) | 1.1% | — | 28 may 2024 | TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file. |
| CVE-2024-22640 | Alta (7.5) | 1.3% | — | 19 abr 2024 | TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color. |
| CVE-2024-32489 | Media (6.1) | 0.58% | — | 15 abr 2024 | TCPDF before 6.7.4 mishandles calls that use HTML syntax. |
| CVE-2017-6100 | Alta (7.5) | 1.5% | — | 23 feb 2017 | tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP. |