CVE-2021-3838 - CVE House

Back to Database

Status published Critical CVE-2021-3838

PHAR Deserialization in dompdf/dompdf

9.8 CVSS

Vulnerability Description

DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the file_get_contents() function. An attacker who can upload files of any type to the server can pass in the phar:// protocol to unserialize the uploaded file and instantiate arbitrary PHP objects. This can lead to remote code execution, especially when DOMPdf is used with frameworks with documented POP chains like Laravel or vulnerable developer code.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-3838

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from dompdf

View All →

php-svg-lib lacks path validation on font through SVG inline styles

Dompdf possible DoS caused by infinite recursion when parsing SVG images

php-svg-lib unsafe attributes merge when parsing `use` tag

php-svg-lib possible DoS caused by infinite recursion when parsing SVG document

URI validation failure on SVG parsing. Bypass of CVE-2023-23924

Affected Vendor

dompdf

View all reports →

Affected Software

dompdf/dompdf

Vulnerable Versions:

unspecified

Timeline

Official Publish: November 15th, 2024

Last Modified: November 18th, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1505.003 Web Shell

T1105 Ingress Tool Transfer

Command and Control

T1068 Exploitation for Privilege Escalation

Privilege Escalation