VULNERABILITY INTELLIGENCE

CVE-2024-51058

CVSS score6.2 MEDIUM

EPSS probability0.81%

CISA KEVNot currently listed

Published2024-11-26

Last modified2026-06-17

Description

Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from the server's file system through <img> src tag, potentially exposing sensitive information.