{"id":"CVE-2014-2383","aliases":["DEBIAN-CVE-2014-2383","EUVD-2022-5021","GHSA-qr6q-w4gj-3865","UBUNTU-CVE-2014-2383"],"status":"published","title":"DOMPDF Arbitrary File Read","description":"dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.39374,"percentile":0.98618,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-200"],"published":"2014-04-28T00:00:00Z","modified":"2026-10-23T15:47:27Z","exploits":[{"source":"exploitdb","id":"EDB-33004","title":"dompdf 0.6.0 - 'dompdf.php?read' Arbitrary File Read","type":"webapps","platform":"php","date":"2014-04-24","verified":true,"url":"https://www.exploit-db.com/exploits/33004"},{"source":"pocgithub","id":"Relativ3Pa1n/CVE-2014-2383-LFI-to-RCE-Escalation","title":"Relativ3Pa1n/CVE-2014-2383-LFI-to-RCE-Escalation","date":"2023-01-26","url":"https://github.com/Relativ3Pa1n/CVE-2014-2383-LFI-to-RCE-Escalation"},{"source":"nuclei","id":"CVE-2014-2383","title":"Dompdf \u003c v0.6.0 - Local File Inclusion","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2383.yaml"}],"fixes":[{"ecosystem":"Packagist","package":"dompdf/dompdf","fixed_in":["0.6.1"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"php-dompdf","fixed_in":["0.6.1+dfsg-2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"dompdf/dompdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.6.0"},{"fixed":"0.6.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"php-dompdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1+dfsg-2"}]}]},{"source":"osv","ecosystem":"Packagist","package":"dompdf/dompdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.6.0"},{"fixed":"0.6.1"}]}],"versions":["v0.6.0"]}],"products":[{"vendor":"dompdf","product":"dompdf"}],"references":[{"url":"https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2383/","tags":["x_transferred","Broken Link","advisory","report"]},{"url":"https://github.com/dompdf/dompdf/commit/23a693993299e669306929e3d49a4a1f7b3fb028","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/258","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","article","web"]},{"url":"http://www.securityfocus.com/archive/1/531912/100/0/threaded","tags":["mailing-list","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://explore.avertium.com/resource/lfi-rfi-escalation-to-rce","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2383","tags":["advisory"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/dompdf/dompdf/CVE-2014-2383.yaml","tags":["web"]},{"url":"https://web.archive.org/web/20151215023329/http://www.securityfocus.com/archive/1/531912/100/0/threaded","tags":["web"]},{"url":"https://github.com/advisories/GHSA-qr6q-w4gj-3865"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-2383","tags":["advisory"]},{"url":"https://github.com/dompdf/dompdf","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2014-2383","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2383","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-2383","description":"dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.","status":"published","published":"2014-04-28T00:00:00Z","modified":"2024-08-06T10:14:25.879Z","updated_at":"2026-11-02T14:33:43.883586Z"}],"euvd":[{"id":"EUVD-2022-5021","description":"dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.","status":"published","published":"2014-04-28T00:00:00Z","modified":"2024-08-06T10:14:25Z","updated_at":"2026-11-03T01:57:14.430145Z"}],"ghsa":[{"id":"GHSA-qr6q-w4gj-3865","title":"DOMPDF Arbitrary File Read","description":"dompdf.php in dompdf before 0.6.1, when `DOMPDF_ENABLE_PHP` is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a `php://filter/read=convert.base64-encode/resource` in the input_file parameter.","status":"published","published":"2022-05-14T02:53:19Z","modified":"2024-04-25T23:00:26Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:37:47.338362Z"}],"nvd":[{"id":"CVE-2014-2383","description":"dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.","status":"published","published":"2014-04-28T14:09:06.707Z","modified":"2026-06-17T00:06:31.027Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:54.082915Z"}],"osv":[{"id":"CVE-2014-2383","description":"dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.","status":"published","published":"2014-04-28T14:09:06Z","modified":"2026-04-10T03:43:41.464346Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2014-2383","description":"dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.","status":"published","published":"2014-04-28T14:09:06.707Z","modified":"2026-10-23T15:47:27.278992081Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"GHSA-qr6q-w4gj-3865","title":"DOMPDF Arbitrary File Read","description":"dompdf.php in dompdf before 0.6.1, when `DOMPDF_ENABLE_PHP` is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a `php://filter/read=convert.base64-encode/resource` in the input_file parameter.","status":"published","published":"2022-05-14T02:53:19Z","modified":"2024-12-08T05:33:39.406584Z","cwes":["CWE-200"],"updated_at":"2026-11-02T15:46:54.760124Z"},{"id":"UBUNTU-CVE-2014-2383","description":"dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.","status":"withdrawn","published":"2014-04-28T14:09:00Z","modified":"2025-07-16T07:31:51.134053Z","updated_at":"2026-11-02T15:54:09.010095Z"}]}}