CVE-2022-0085

CVE-2022-0085 is a Server-Side Request Forgery (SSRF) vulnerability affecting dompdf/dompdf versions prior to 2.0.0. With a CVSS score of 5.3 (MEDIUM), this vulnerability allows an unauthenticated attacker to inject malicious URLs, potentially leading to information disclosure or unauthorized actions from the server's perspective, though without direct confidentiality or availability impact. There is currently no evidence of active exploitation, nor are there publicly available exploit codes or significant community discussion surrounding this CVE. Its EPSS score and FAUCET Risk Score indicate a low likelihood of exploitation in the wild.