CVE-2021-3902: Improper Restriction of XML External Entity Reference in dompdf/dompdf
First published: Fri Nov 15 2024(Updated: )
An improper restriction of external entities (XXE) vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery (SSRF) and deserialization attacks. This issue affects all versions prior to 2.0.0. The vulnerability can be exploited even if the isRemoteEnabled option is set to false. It allows attackers to perform SSRF, disclose internal image files, and cause PHAR deserialization attacks.
Credit: security@huntr.dev security@huntr.dev
| Affected Software | Affected Version | How to fix |
|---|---|---|
| composer/dompdf/dompdf | <2.0.0 | 2.0.0 |
| Dompdf | <2.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-3902?
CVE-2021-3902 has a medium severity rating due to its potential for exploitation through SSRF and deserialization attacks.
How do I fix CVE-2021-3902?
To fix CVE-2021-3902, upgrade to dompdf version 2.0.0 or higher.
What does CVE-2021-3902 vulnerability affect?
CVE-2021-3902 affects all versions of dompdf prior to 2.0.0.
Can CVE-2021-3902 be exploited if remote access is disabled?
Yes, CVE-2021-3902 can be exploited regardless of whether the isRemoteEnabled option is set to true or false.
What type of attacks can CVE-2021-3902 facilitate?
CVE-2021-3902 can facilitate Server-Side Request Forgery (SSRF) and deserialization attacks.
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/references
- agent/author
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-3vjh-xrhf-v9xh
- alias/CVE-2021-3902
- agent/software-canonical-lookup
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- collector/github-advisory
- agent/trending
- agent/source
- agent/tags
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-api
- package-manager/composer
- vendor/dompdf project
- canonical/dompdf