What is GHSA-jjwj-w3gc-gcw4?

GHSA-jjwj-w3gc-gcw4 is a security advisory published by GitHub Security Advisories with High severity. DOMPDF Remote Code Execution

Which CVE IDs does GHSA-jjwj-w3gc-gcw4 cover?

GHSA-jjwj-w3gc-gcw4 covers the following CVE IDs: CVE-2014-5013. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jjwj-w3gc-gcw4?

GHSA-jjwj-w3gc-gcw4 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-jjwj-w3gc-gcw4?

GHSA-jjwj-w3gc-gcw4 affects 1 product, including: composer/dompdf/dompdf:\u003e= 0.6, \u003c 0.6.2.

GHSA-jjwj-w3gc-gcw4HighCVSS 8.8

DOMPDF Remote Code Execution

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

February 6, 2024

🔗 CVE IDs covered (1)

CVE-2014-5013 →

📋 Description

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383.

🎯 Affected products1

composer/dompdf/dompdf:>= 0.6, < 0.6.2

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2014-5013
https://github.com/dompdf/dompdf/compare/v0.6.1...v0.6.2
https://github.com/dompdf/dompdf/releases/tag/v0.6.2
https://github.com/FriendsOfPHP/security-advisories/blob/master/dompdf/dompdf/CVE-2014-5013.yaml
https://github.com/advisories/GHSA-jjwj-w3gc-gcw4