CVE-2017-6100: Tcpdf Project Tcpdf

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.

Affected products

• Tcpdf Project Tcpdf: up to and including 6.1.1

Published 2017-02-23. Last modified 2026-06-17.