Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-pxt1-z2yg-43cf
Vulnerability ID VCID-pxt1-z2yg-43cf
Aliases CVE-2023-23924
GHSA-3cw5-7cxw-v5qg
Summary Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing `<image>` tags with uppercase letters. This may lead to arbitrary object unserialize on PHP < 8, through the `phar` URL wrapper. An attacker can exploit the vulnerability to call arbitrary URL with arbitrary protocols, if they can provide a SVG file to dompdf. In PHP versions before 8.0.0, it leads to arbitrary unserialize, that will lead to the very least to an arbitrary file deletion and even remote code execution, depending on classes that are available.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-551 Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
CWE-863 Incorrect Authorization
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.51462 https://api.first.org/data/v1/epss?cve=CVE-2023-23924
epss 0.51462 https://api.first.org/data/v1/epss?cve=CVE-2023-23924
cvssv3.1 10.0 https://github.com/advisories/GHSA-3cw5-7cxw-v5qg
cvssv3.1_qr CRITICAL https://github.com/advisories/GHSA-3cw5-7cxw-v5qg
generic_textual CRITICAL https://github.com/advisories/GHSA-3cw5-7cxw-v5qg
cvssv3.1 10.0 https://github.com/dompdf/dompdf
generic_textual CRITICAL https://github.com/dompdf/dompdf
cvssv3.1 10 https://github.com/dompdf/dompdf/commit/7558f07f693b2ac3266089f21051e6b78c6a0c85
cvssv3.1 10.0 https://github.com/dompdf/dompdf/commit/7558f07f693b2ac3266089f21051e6b78c6a0c85
generic_textual CRITICAL https://github.com/dompdf/dompdf/commit/7558f07f693b2ac3266089f21051e6b78c6a0c85
ssvc Track https://github.com/dompdf/dompdf/commit/7558f07f693b2ac3266089f21051e6b78c6a0c85
cvssv3.1 10 https://github.com/dompdf/dompdf/releases/tag/v2.0.2
cvssv3.1 10.0 https://github.com/dompdf/dompdf/releases/tag/v2.0.2
generic_textual CRITICAL https://github.com/dompdf/dompdf/releases/tag/v2.0.2
ssvc Track https://github.com/dompdf/dompdf/releases/tag/v2.0.2
cvssv3.1 10 https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg
cvssv3.1 10.0 https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg
cvssv3.1_qr CRITICAL https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg
generic_textual CRITICAL https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg
ssvc Track https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg
cvssv3.1 10.0 https://github.com/FriendsOfPHP/security-advisories/blob/master/dompdf/dompdf/CVE-2023-23924.yaml
generic_textual CRITICAL https://github.com/FriendsOfPHP/security-advisories/blob/master/dompdf/dompdf/CVE-2023-23924.yaml
cvssv3.1 10.0 https://nvd.nist.gov/vuln/detail/CVE-2023-23924
generic_textual CRITICAL https://nvd.nist.gov/vuln/detail/CVE-2023-23924
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-23924
https://github.com/advisories/GHSA-3cw5-7cxw-v5qg
https://github.com/dompdf/dompdf
https://github.com/FriendsOfPHP/security-advisories/blob/master/dompdf/dompdf/CVE-2023-23924.yaml
https://nvd.nist.gov/vuln/detail/CVE-2023-23924
7558f07f693b2ac3266089f21051e6b78c6a0c85 https://github.com/dompdf/dompdf/commit/7558f07f693b2ac3266089f21051e6b78c6a0c85
GHSA-3cw5-7cxw-v5qg https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg
v2.0.2 https://github.com/dompdf/dompdf/releases/tag/v2.0.2
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H Found at https://github.com/advisories/GHSA-3cw5-7cxw-v5qg
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H Found at https://github.com/dompdf/dompdf
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H Found at https://github.com/dompdf/dompdf/commit/7558f07f693b2ac3266089f21051e6b78c6a0c85
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H Found at https://github.com/dompdf/dompdf/commit/7558f07f693b2ac3266089f21051e6b78c6a0c85
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:02:06Z/ Found at https://github.com/dompdf/dompdf/commit/7558f07f693b2ac3266089f21051e6b78c6a0c85
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H Found at https://github.com/dompdf/dompdf/releases/tag/v2.0.2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H Found at https://github.com/dompdf/dompdf/releases/tag/v2.0.2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:02:06Z/ Found at https://github.com/dompdf/dompdf/releases/tag/v2.0.2
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H Found at https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H Found at https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:02:06Z/ Found at https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H Found at https://github.com/FriendsOfPHP/security-advisories/blob/master/dompdf/dompdf/CVE-2023-23924.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-23924
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.97949
EPSS Score 0.51462
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:20:18.214060+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/23xxx/CVE-2023-23924.json 38.6.0