A critical logic flaw discovered in the widely used mPDF PHP library could expose internal networks and sensitive services on approximately 70 million devices worldwide.
The vulnerability stems from improper regular expression parsing, which allows attackers to issue unauthorized web requests even when user input appears sanitized.
mPDF, an open-source PHP library for generating PDFs from HTML, contains a dangerous vulnerability in its CSS parsing.
https://gbhackers.com/70-million-device ... ogic-flaw/