motikan2010/CVE-2023-23924

PoC

CVE-2023-23924 (Dompdf - RCE) PoC

view exploit source poc_in_githubauthor motikan2010published 2023-02-01catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-23924US	critical9.8OT high	3.57% (89th)	Exploit	2023-02-01
Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing `<image>` tags with uppercase letters. This may lead to arbitrary o…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.