CVE Intelligence

mPDF mPDF vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting mPDF mPDF: 1 record(s), with affected versions and fixes.

CVE-2022-50897 Medium · 5.5 CWE-98 Jan 13, 2026
mPDF 7.0 - Local File Inclusion
mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulating annotation file parameters. Attackers can generate URL-encoded or base64 payloads to include local files through crafted annotation content with file path specifications.