This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: Dompdf < 1.2.1 has a critical flaw allowing **Remote Code Execution (RCE)** via CSS `@font-face` injection.โฆ
๐ก๏ธ **Root Cause**: Improper validation of CSS `src:url` fields. ๐ **Flaw**: The library fails to sanitize font sources, allowing PHP code to be disguised as a font file and cached by the server. โ ๏ธ
Q3Who is affected? (Versions/Components)
๐ฅ **Affected**: Users running **Dompdf versions strictly less than 1.2.1**. ๐ฆ **Component**: The HTML-to-PDF conversion library used in PHP applications. ๐
Q4What can hackers do? (Privileges/Data)
๐ต๏ธ **Hacker Actions**: Execute arbitrary PHP code on the server. ๐ป **Privileges**: Gain the same privileges as the web server process. ๐๏ธ **Data**: Access, modify, or delete any data the web server can reach. ๐
Q5Is exploitation threshold high? (Auth/Config)
๐ **Threshold**: **Low**. ๐ช **Auth**: No authentication required for the initial CSS injection. โ๏ธ **Config**: Requires the target to use vulnerable Dompdf versions and process user-supplied HTML/CSS. ๐ฏ
Q6Is there a public Exp? (PoC/Wild Exploitation)
๐ **Public Exp?**: **YES**. ๐ Multiple PoCs exist on GitHub (e.g., `rvizx/CVE-2022-28368`) and ExploitDB. ๐ ๏ธ Automated Python scripts are available to simplify exploitation. ๐ค
Q7How to self-check? (Features/Scanning)
๐ **Self-Check**: Scan for Dompdf library versions in your PHP project. ๐ **Feature**: Check if `@font-face` CSS rules are processed from untrusted user input.โฆ
๐ฉน **Fixed**: **YES**. โ **Patch**: Upgrade to **Dompdf version 1.2.1 or higher**. ๐ The official pull request #2808 addresses this security issue. ๐ก๏ธ
Q9What if no patch? (Workaround)
๐ง **No Patch?**: Sanitize all CSS inputs rigorously. ๐ซ **Workaround**: Disable font caching if possible, or restrict `@font-face` usage to trusted, static resources only.โฆ
๐ฅ **Urgency**: **CRITICAL**. ๐จ **Priority**: Immediate patching required. โณ RCE vulnerabilities allow total system takeover. ๐โโ๏ธ Do not delay upgrading to v1.2.1+. ๐