CVE-2021-45394

An issue was discovered in Spipu HTML2PDF before 5.2.4

published January 18, 2022

CVSS
—
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious <link> tag in the converted HTML document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01581 · 75.3th percentile
Published
2022-01-18T11:15Z
EPSS history
Timeline
  • 18 JAN 11:15Z
    An issue was discovered in Spipu HTML2PDF before 5.2.4
    cvelistv5