high7.5
CVE-2017-6100
tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.
Impact
tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tcpdf Project | Tcpdf | through 6.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2017/02/19/1
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814030
- https://sourceforge.net/p/tcpdf/bugs/1005/
- http://www.openwall.com/lists/oss-security/2017/02/19/1
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814030
- https://sourceforge.net/p/tcpdf/bugs/1005/