CVE-2014-2383 DOMPDF Arbitrary File Read
MediumCVSS 6.8
EPSS 39.4%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dompdf/dompdf(Packagist) | >= 0.6.0, < 0.6.1 | 0.6.1 |
| dompdf/dompdf(Packagist) | = v0.6.0 | No fix listed |
| debian/php-dompdf(Debian:12) | < 0.6.1+dfsg-2 | 0.6.1+dfsg-2 |
| dompdf/dompdf | <= 0.6.0 | No fix listed |
References
- Debian Security Tracker CVE-2014-2383 vendor-advisory
- bugs.debian.org issue-tracking
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch third-party-advisory
- github.com exploit
- github.com product
- web.archive.org
- 20140423 CVE-2014-2383 - Arbitrary file read in dompdf mailing-list third-party-advisory
- github.com
- 20140423 CVE-2014-2383 - Arbitrary file read in dompdf broken-link mailing-list third-party-advisory vdb-entry
- explore.avertium.com
- www.portcullis-security.com broken-link