Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-23924— URI validation failure on SVG parsing in Dompdf

Quick assessment

Affected
dompdf dompdf
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Dompdf是一个 HTML 到 PDF 的转换器。 Dompdf 2.0.1版本存在安全漏洞。攻击者利用该漏洞可以使用任意协议调用任意URL。

CVSS 10.0 · Critical EPSS 3.57% · P89
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-23924

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
URI validation failure on SVG parsing in Dompdf
Source: CVE Program / CVE List V5
Vulnerability Description
Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing `<image>` tags with uppercase letters. This may lead to arbitrary object unserialize on PHP < 8, through the `phar` URL wrapper. An attacker can exploit the vulnerability to call arbitrary URL with arbitrary protocols, if they can provide a SVG file to dompdf. In PHP versions before 8.0.0, it leads to arbitrary unserialize, that will lead to the very least to an arbitrary file deletion and even remote code execution, depending on classes that are available.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不正确的行为次序：在解析与净化处理之前进行授权
Source: CVE Program / CVE List V5
Vulnerability Title
Dompdf 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dompdf是一个 HTML 到 PDF 的转换器。 Dompdf 2.0.1版本存在安全漏洞。攻击者利用该漏洞可以使用任意协议调用任意URL。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
dompdf dompdf < 2.0.2 -

II. Public POCs for CVE-2023-23924

# POC Description Source Link Shenlong Link
1 CVE-2023-23924 (Dompdf - RCE) PoC https://github.com/motikan2010/CVE-2023-23924 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-23924

请登录查看更多情报信息。

Patches & Fixes for CVE-2023-23924 (1)

Vendor Advisories for CVE-2023-23924 (1)

Other References for CVE-2023-23924 (1)

IV. Related Vulnerabilities

Same product: dompdf
Same vendor: dompdf
Same weakness: CWE-551

V. Comments for CVE-2023-23924

No comments yet

Leave a comment