Description (CNA)
An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| tecnick / tcpdf | affected 0 before 6.8.0 |
CWE
CWE-79
References
- https://tcpdf.org
- https://github.com/tecnickcom/TCPDF/compare/6.7.8...6.8.0
- https://github.com/tecnickcom/TCPDF/commit/11778aaa2d9e30a9ae1c1ee97ff349344f0ad6e1
- https://andrea0.medium.com/analysis-of-cve-2024-56527-dbdab6962add
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.