Vulnerability from drupal
Published
2022-07-13 15:44
Modified
2023-08-10 21:36
Summary
Details
This module enables you to generate print versions of content.
Some installations of the module make use of the dompdf/dompdf third-party dependency.
Security vulnerabilities exist for versions of dompdf/dompdf < 2.0.0
See the library release notes for more detail: https://github.com/dompdf/dompdf/releases/tag/v2.0.0
Note on 3rd party vulnerabilities
This security advisory corresponds to a 3rd party vulnerability. Normally the Drupal Security Team would not issue advisories related to 3rd party code that is shipped separately from a module per our policy (most recent update is PSA-2019-09-04). In this case, because the module required a specific version and could not be updated without a change to the Drupal module we do issue an advisory.
Credits
Munavir P k
www.drupal.org/user/3604066
{
"affected": [
{
"database_specific": {
"affected_versions": "\u003c2.6.0"
},
"package": {
"ecosystem": "Packagist:https://packages.drupal.org/8",
"name": "drupal/entity_print"
},
"ranges": [
{
"database_specific": {
"constraint": "\u003c2.6.0"
},
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.0"
}
],
"type": "ECOSYSTEM"
}
],
"severity": []
}
],
"aliases": [],
"credits": [
{
"contact": [
"https://www.drupal.org/user/3604066"
],
"name": "Munavir P k"
},
{
"contact": [
"https://www.drupal.org/user/389677"
],
"name": "szato"
}
],
"details": "This module enables you to generate print versions of content. \nSome installations of the module make use of the dompdf/dompdf third-party dependency. \nSecurity vulnerabilities exist for versions of dompdf/dompdf \u003c 2.0.0\n\nSee the library release notes for more detail: \u003chttps://github.com/dompdf/dompdf/releases/tag/v2.0.0\u003e\n\n### Note on 3rd party vulnerabilities\n\nThis security advisory corresponds to a 3rd party vulnerability. Normally the Drupal Security Team would not issue advisories related to 3rd party code that is shipped separately from a module per our policy (most recent update is [PSA-2019-09-04](https://www.drupal.org/psa-2019-09-04)). In this case, because the module required a specific version and could not be updated without a change to the Drupal module we do issue an advisory.",
"id": "DRUPAL-CONTRIB-2022-048",
"modified": "2023-08-10T21:36:29.000Z",
"published": "2022-07-13T15:44:42.000Z",
"references": [
{
"type": "WEB",
"url": "https://www.drupal.org/sa-contrib-2022-048"
}
],
"schema_version": "1.7.0"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…