CVE Feed

    Dashboard / CVE / CVE-2022-41343

    CVE-2022-41343

    registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule.

    Published:Sep 25, 2022
    Last Modified:May 22, 2025
    EPS:Sep 25, 2022
    EPSS Score:0.65121
    CVSS Score:7.5

    Affected Products

    Vendor
    Dompdf Project
    Product
    Dompdf

    Exploits

    https://github.com/dompdf/dompdf/issues/2994https://tantosec.com/blog/cve-2022-41343/https://github.com/dompdf/dompdf/issues/2994https://tantosec.com/blog/cve-2022-41343/https://tantosec.com/blog/cve-2022-41343/https://github.com/BKreisel/CVE-2022-41343

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-150 Collect Data from Common Resource Locations
    CAPEC-639 Probe System Files

    Related CVEs

    CVE-2021-3902 (CVSS 9.8) — An improper restriction of external entities (XXE) vulnerability in dompdf/dompdf's SVG parser allows for Serv…
    CVE-2021-3838 (CVSS 9.8) — DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol be…
    CVE-2023-50262 (CVSS 5.3) — Dompdf is an HTML to PDF converter for PHP. When parsing SVG images Dompdf performs an initial validation to e…
    CVE-2023-24813 (CVSS 10) — Dompdf is an HTML to PDF converter written in php. Due to the difference in the attribute parser of Dompdf and…
    CVE-2023-23924 (CVSS 10) — Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passi…
    CVE-2022-2400 (CVSS 5.3) — External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.…
    CVE-2022-0085 (CVSS 5.3) — Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.…
    CVE-2022-28368 (CVSS 9.8) — Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Styl…
    CVE-2014-5011 (CVSS 6.5) — DOMPDF before 0.6.2 allows Information Disclosure.…
    CVE-2014-5012 (CVSS 6.5) — DOMPDF before 0.6.2 allows denial of service.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High