CVE-2022-50897 — mPDF 7.0 - Local File Inclusion
mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulating annotation file parameters. Attackers can generate UR…
Published: 2026-01-13 · CVSS: 8.7 · CVSS 4.0
mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulating annotation file parameters. Attackers can generate URL-encoded or base64 payloads to include local files through crafted annotation content with file path specifications.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7