CVE-2024-51058

Summary

CVE-2024-51058 is a newly identified Local File Inclusion (LFI) vulnerability affecting TCPDF 6.7.5. Maliciously crafted <img> src tags can be exploited by users to read arbitrary files from the server's file system. This issue poses a significant risk as it may lead to the exposure of sensitive information. The vulnerability has been discovered in the popular open-source PDF library, making it essential for users to apply the necessary patches to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.