Lucene search
N B Sri HarshΠ°NODEJS:670HistoryJun 01, 2018 - 10:07 p.m.
Command Injection
2018-06-0122:07:35
N B Sri HarshΠ°
www.npmjs.com
615
0.005 Low
EPSS
Percentile
75.4%
Overview
Versions of pdf-image before 2.0.0 are vulnerable to command injection. This vulnerability is exploitable if the attacker has control over the pdfFilePath variable passed into pdf-image.
Recommendation
Update to version 2.0.0 or later.
References
Related
github
github
Command Injection in pdf-image
2020-09-01 20:44:52
osv
osv
Command Injection in pdf-image
2020-09-01 20:44:52
veracode
veracode
Remote Command Execution (RCE)
2018-05-30 06:09:31
prion
prion
Command injection
2018-06-01 19:29:00
hackerone
hackerone
Node.js third-party modules: Command injection in 'pdf-image'
2018-04-18 18:24:40
cvelist
cvelist
CVE-2018-3757
2018-05-31 00:00:00
cve
cve
CVE-2018-3757
2018-06-01 19:29:00
nvd
nvd
CVE-2018-3757
2018-06-01 19:29:00