CVE-2011-5219

Directory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.

Affected products

Mpdf

mpdf1 Mpdf

≤ 5.3, 5.2

Fix

Available

CVSS 2.0

5.0 MEDIUM

EPSS

9.2% (95th percentile)

Weakness

CWE-22

NVD status

Modified

Published

2012-10-25