Description
An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.
Remediation
References
Related Vulnerabilities
WordPress Plugin post highlights Cross-Site Scripting (2.6)
Drupal Improper Authentication Vulnerability (CVE-2006-1228)
WordPress Plugin CM Download Manager Arbitrary File Upload (2.8.5)
WebLogic Improper Certificate Validation Vulnerability (CVE-2021-3450)
WordPress Plugin Migration, Backup, Staging-WPvivid Directory Traversal (0.9.75)