CVE-2011-5219

Name of the Vulnerable Software and Affected Versions mPDF versions 5.3 and earlier

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by using a .. (dot dot) in the filename parameter of the examples/show code.php file.

Recommendations For mPDF versions 5.3 and earlier, consider restricting access to the examples/show code.php file until a patch is available. As a temporary workaround, avoid using the filename parameter with untrusted input to minimize the risk of exploitation.