CVE-2014-2383

dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

39.37% chance of exploitation in the next 30 days, 99th percentile

Nuclei

medium · CWE-200

Published

2014-04-28

Updated

2024-08-06

Proof-of-concept exploits (1)

• Relativ3Pa1n/CVE-2014-2383-LFI-to-RCE-Escalation1★ · 2023-01-27

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2383.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33004

Security advisories

• http://seclists.org/fulldisclosure/2014/Apr/258
• http://www.securityfocus.com/archive/1/531912/100/0/threaded
• dompdf/dompdf/commit/23a693993299e669306929e3d49a4a1f7b3fb028
• advisories/GHSA-qr6q-w4gj-3865

References

• CVE Record
• NVD entry