CVE Intelligence

mPDF vulnerabilities

🔔 Create alert RSS

Published CVEs affecting mPDF products: 1 record(s), with severity, exploitation and fixes.

mPDF 1

Exploited only (KEV) →

CVE-2022-50897 Medium · 5.5 CWE-98 Jan 13, 2026
mPDF 7.0 - Local File Inclusion
mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulating annotation file parameters. Attackers can generate URL-encoded or base64 payloads to include local files through crafted annotation content with file path specifications.