CyberRota Analysis
AI-GeneratedDompdf versions 3.15 and earlier are vulnerable to an information disclosure flaw that allows attackers to exploit the SVG rendering functionality to leak filesystem information through crafted data-URI encoded SVG documents. By embedding image references that point to non-existent files, an attacker can manipulate the rendering process to reveal sensitive filesystem paths. Organizations using affected versions of Dompdf should prioritize upgrading to version 3.16 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI encoded SVG document. Using an <image> element inside a data-URI embedded SVG, an attacker can attempt to embed other files via the href or xlink:href attributes. When processing a file that does not exist (e.g. file:///DOESNOTEXIST), dompdf behaves differently than it does when accessing a file or directory that actually exists on the filesystem. This issue has been fixed in version 3.16.
Related CVEs
Other vulnerabilities affecting the same vendor(s)