DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383.
No PoCs from references.
- https://github.com/nhthongDfVn/File-Converter-Exploit
- https://github.com/violinist-dev/symfony-cloud-security-checker