GHSA-rmv2-8jjc-23xwMediumCVSS 6.2

TCPDF Local File Inclusion vulnerability

Published
November 26, 2024
Last Modified
November 3, 2025

🔗 CVE IDs covered (1)

CVE-2024-51058 →

📋 Description

Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from the server's file system through src tag, potentially exposing sensitive information.

🎯 Affected products1

  • composer/tecnickcom/tcpdf:<= 6.7.5

🔗 References (6)