CVE-2014-2383
1 advisory.
Packagist/dompdf/dompdf CVE-2014-2383: medium
DOMPDF Arbitrary File Read
Action: Upgrade dompdf/dompdf to 0.6.1 or later.
composer require dompdf/dompdf:0.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.6.0 | 0.6.1 | - |
Fixed versions
| 0.6.1 |
Sources
- osv: GHSA-qr6q-w4gj-3865
- https://nvd.nist.gov/vuln/detail/CVE-2014-2383
- https://github.com/dompdf/dompdf/commit/23a693993299e669306929e3d49a4a1f7b3fb028
- https://github.com/FriendsOfPHP/security-advisories/blob/master/dompdf/dompdf/CVE-2014-2383.yaml
- https://github.com/dompdf/dompdf
- https://web.archive.org/web/20151215023329/http://www.securityfocus.com/archive/1/531912/100/0/threaded
- http://seclists.org/fulldisclosure/2014/Apr/258
CVE-2014-2383 · published · modified · JSON