{"cvss":0.0,"datePublished":"2025-06-07T00:00:00Z","dateUpdated":"2025-06-07T00:00:00Z","description":"dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.","dueDate":"","id":"CVE-2014-2383","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"dompdf","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"dompdf dompdf Exposure of Sensitive Information to an Unauthorized Actor","vendor":"dompdf"}