mPDF Local File Inclusion Vulnerability

A local file inclusion vulnerability has been identified in mPDF version 7.0. This vulnerability allows attackers to read arbitrary system files by manipulating annotation file parameters. Exploitation involves crafting annotation content with file path specifications, which can include local files through URL-encoded or base64 payloads.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive system files, potentially allowing for further attacks or information disclosure.

Reproduction

To reproduce this vulnerability, create an mPDF document and include an annotation with a file path specification in the 'file' attribute. The annotation content can be crafted to include URL-encoded or base64-encoded payloads that reference local files. When the document is processed, the specified files will be included, demonstrating the local file inclusion vulnerability.