← Database

CVE-2022-41343

HIGH CVSS: 7.5 Published: 2022-09-25 Modified: 2026-06-17

Description

registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule.

Affected Platforms

Dompdf Project Dompdf

Weakness Type

CWE-552, CWE-552

References