MP
Vendor
Mpdf Project
4
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-50897 | MP Mpdf Mpdf Project | 5.5 | Jan 13 | mPDF 7.0 - Local File Inclusion |
| CVE-2024-26476 | MP Mpdf Mpdf Project | 3.5 | Feb 28 | An issue in open-emr before v.7.0.2 allows a remote attacker to escalate privileges via a crafted script to the formid parameter in the ereq_form.php component |
| CVE-2019-1000005 | MP Mpdf Mpdf Project | 8.8 | Feb 4 | mPDF version 7.1.7 and earlier contains a CWE-502: Deserialization of Untrusted Data vulnerability in getImage() method of Image/ImageProcessor class that can result in Arbitry… |
| CVE-2018-19047 | MP Mpdf Mpdf Project | 10.0 | Nov 7 | mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML, allows SSRF, as demonstrated by a '<img src="http://192.168' substring that triggers a call to… |