CVE-2024-56527

Name of the Vulnerable Software and Affected Versions TCPDF versions prior to 6.8.0

Description An issue was discovered in the Error function, which lacks an htmlspecialchars call for the error message. This could potentially lead to issues with error message handling.

Recommendations For versions prior to 6.8.0, update to version 6.8.0 or later to resolve the issue. As a temporary workaround, consider disabling the Error function until a patch is available. Restrict access to the Error function to minimize the risk of exploitation. Avoid using the Error function in sensitive areas of the application until the issue is resolved.