An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tcpdf | Tcpdf_project | * | 6.8.0 (excluding) |
| Tcpdf | Ubuntu | focal | * |
| Tcpdf | Ubuntu | oracular | * |
| Tcpdf | Ubuntu | upstream | * |