CVE-2018-17057
An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.
- Update to 6.2.22
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for la-haute-societe/tcpdf in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.
Check your installed stack and versions against the current vulnerability feeds.