Debian/php-font-lib: unknown

Cross-site scripting (XSS) vulnerability in www/make_subset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.

Action: Upgrade php-font-lib to 0.3.1+dfsg-2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2014-2570#Debian:14/php-font-lib
• https://security-tracker.debian.org/tracker/CVE-2014-2570

published 2015-08-31T18:59:05.557Z · modified 2026-10-23T15:47:37.229904Z · JSON