← Database

CVE-2024-51058

MEDIUM CVSS: 6.2 Published: 2024-11-26 Modified: 2026-06-17

Description

Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from the server's file system through src tag, potentially exposing sensitive information.

Affected Platforms

Tcpdf Project Tcpdf

Weakness Type

CWE-552

References