Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2018-17057 — Deserialization of Untrusted Data in Tcpdf

CWE-502 — Deserialization of Untrusted Data10 documents7 sources
Severity
9.8CRITICALNVD
EPSS
52.1%
top 2.07%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
7
Tcpdf Project TcpdfLimesurveyTecnick Tcpdf+4 more
Timeline
PublishedSep 14
Latest updateOct 6

Description

An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages7 packages

▶Packagistfooman/tcpdf< 6.2.22
▶NVDtecnick/tcpdf< 6.2.22
▶Packagistspoonity/tcpdf< 6.2.22
▶Packagisttecnickcom/tcpdf< 6.2.22
▶Packagistla-haute-societe/tcpdf< 6.2.22

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
OSV
TCPDF vulnerable to attackers triggering deserialization of arbitrary data↗2022-10-06
▶
GHSA
TCPDF vulnerable to attackers triggering deserialization of arbitrary data↗2022-10-06
▶
OSV
CVE-2018-17057: An issue was discovered in TCPDF before 6↗2018-09-14
▶
CVEList
CVE-2018-17057: An issue was discovered in TCPDF before 6↗2018-09-14
▶

💥Exploits & PoCs

1
Exploit-DB
LimeSurvey < 3.16 - Remote Code Execution↗2019-04-02
▶

📋Vendor Advisories

1
Debian
CVE-2018-17057: tcpdf - An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserializ...↗2018
▶

💬Community

3
Bugzilla
CVE-2018-17057 php-tcpdf: phar deserialization in TCPDF might lead to RCE↗2019-04-02
▶
Bugzilla
CVE-2018-17057 php-tcpdf: phar deserialization in TCPDF might lead to RCE [epel-all]↗2019-04-02
▶
Bugzilla
CVE-2018-17057 php-tcpdf: phar deserialization in TCPDF might lead to RCE [fedora-all]↗2019-04-02
▶
CVE-2018-17057 — Deserialization of Untrusted Data | cvebase