CVE Intelligence

Mpdf Project Mpdf vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Mpdf Project Mpdf: 1 record(s), with affected versions and fixes.
cpe:2.3:a:mpdf_project:mpdf

CVE-2022-50897 Medium · 5.5 CWE-98 Jan 13, 2026
mPDF 7.0 - Local File Inclusion
mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulating annotation file parameters. Attackers can generate URL-encoded or base64 payloads to include local files through crafted annotation content with file path specifications.