Vulnerabilities

TI-2024-37414 CVE-2024-56527 · GHSA-qx95-cwh6-9mvq

Cross-site scripting in Tecnick tcpdf

MEDIUM 40

An issue was discovered in TCPDF before 6.8.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00762 Published 2024-12-27 Fixed in 6.8.0 CWE-79

TI-2024-37409 CVE-2024-56522 · GHSA-w95c-7994-ghpr

MEDIUM 40

An issue was discovered in TCPDF before 6.8.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00614 Published 2024-12-27 Fixed in 6.8.0 CWE-843

TI-2024-37408 CVE-2024-56521 · GHSA-9mgx-552f-59p6

MEDIUM 50

An issue was discovered in TCPDF before 6.8.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00785 Published 2024-12-27 Fixed in 6.8.0 CWE-295

TI-2024-37407 CVE-2024-56520 · GHSA-grhh-r4jj-8jh7

LOW 39

An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00557 Published 2024-12-27 Fixed in 6.8.0, 2.6.4

TI-2024-37406 CVE-2024-56519 · GHSA-4p8j-vhjm-6pvw

MEDIUM 40

An issue was discovered in TCPDF before 6.8.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00623 Published 2024-12-27 Fixed in 6.8.0 CWE-79