CVE-2017-6100

NONE EPSS 70.3%
Published Feb 23, 20179y ago · Modified Jun 17, 20262w ago
Find Similar
Published Feb 23, 2017 9y ago
Last Modified Jun 17, 2026 2w ago

Description

tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.

Threat Intelligence

EPSS Exploit Probability
70.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-668

Affected Products 1

VendorProductVersionRange
tcpdf_projecttcpdf* ≤6.1.1

References 3

  • openwall.com http://www.openwall.com/lists/oss-security/2017/02/19/1
    Mailing ListPatchThird Party Advisory
  • bugs.debian.org https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814030
    PatchThird Party Advisory
  • sourceforge.net https://sourceforge.net/p/tcpdf/bugs/1005/
    Issue TrackingPatchThird Party Advisory

Remediation

  • openwall.com http://www.openwall.com/lists/oss-security/2017/02/19/1
    Mailing ListPatchThird Party Advisory
  • bugs.debian.org https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814030
    PatchThird Party Advisory
  • sourceforge.net https://sourceforge.net/p/tcpdf/bugs/1005/
    Issue TrackingPatchThird Party Advisory