CVE-2018-17057

CRITICAL

TCPDF <6.2.22 - Deserialization

Title source: llm

Description

An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.

Exploits (1)

exploitdb WORKING POC

by q3rv0 · pythonwebappsphp

https://www.exploit-db.com/exploits/46634

View Code ZIP pw:eip

References (7)

[Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/152200/TCPDF-6.2.19-Deserialization-Remote-Code-Execution.html

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/152360/LimeSurvey-Deserialization-Remote-Code-Execution.html

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2019/Mar/36

[Third Party Advisory] https://contao.org/en/news/security-vulnerability-cve-2018-17057.html

[Patch, Third Party Advisory] https://github.com/LimeSurvey/LimeSurvey/commit/1cdd78d27697b3150bb44aaa7af1a81062a591a5

[Patch, Third Party Advisory] https://github.com/tecnickcom/TCPDF/commit/1861e33fe05f653b67d070f7c106463e7a5c26ed

[Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/46634/

Scores

CVSS v3 9.8

EPSS 0.5322

EPSS Percentile 97.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-502

Status published

Affected Products (6)

tecnick/tcpdf < 6.2.22

limesurvey/limesurvey < 3.16.0

tecnickcom/tcpdf < 6.2.22Packagist

fooman/tcpdf < 6.2.22Packagist

la-haute-societe/tcpdf < 6.2.22Packagist

spoonity/tcpdf < 6.2.22Packagist

Timeline

Published Sep 14, 2018

Tracked Since Feb 18, 2026