{"id":"GHSA-pf6p-25r2-fx45","aliases":["CVE-2022-0085"],"title":"Server-Side Request Forgery in dompdf/dompdf","description":"Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.","severity":"medium","score":5.3,"published":"2022-06-29T00:00:27.000Z","modified":"2023-11-08T04:07:28.174Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"dompdf/dompdf","ranges":[{"events":[{"introduced":"0"},{"fixed":"2.0.0"}],"type":"ECOSYSTEM"}],"versions":["v0.6.0","v0.6.1","v0.6.2","v0.7.0","v0.7.0-beta","v0.7.0-beta2","v0.7.0-beta3","v0.8.0","v0.8.1","v0.8.2","v0.8.3","v0.8.4","v0.8.5","v0.8.6","v1.0.0","v1.0.1","v1.0.2","v1.1.0","v1.1.1","v1.2.0","v1.2.1","v1.2.2"],"fixed":["2.0.0"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2022-0085","https://github.com/dompdf/dompdf/commit/bb1ef65011a14730b7cfbe73506b4bb8a03704bd","https://github.com/FriendsOfPHP/security-advisories/blob/master/dompdf/dompdf/CVE-2022-0085.yaml","https://github.com/dompdf/dompdf","https://huntr.dev/bounties/73dbcc78-5ba9-492f-9133-13bbc9f31236"],"sources":[{"name":"OSV","id":"GHSA-pf6p-25r2-fx45","modified":"2023-11-08T04:07:28.174206Z","url":"https://osv.dev/vulnerability/GHSA-pf6p-25r2-fx45"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","score":5.3}]}