Lucene search
GoogleOSV:GHSA-5GWH-G79J-VH4QHistorySep 01, 2020 - 8:44 p.m.
Command Injection in pdf-image
2020-09-0120:44:52
Google
osv.dev
8
0.005 Low
EPSS
Percentile
75.4%
Versions of pdf-image before 2.0.0 are vulnerable to command injection. This vulnerability is exploitable if the attacker has control over the pdfFilePath variable passed into pdf-image.
Recommendation
Update to version 2.0.0 or later.
Related
nodejs
nodejs
Command Injection
2018-06-01 22:07:35
github
github
Command Injection in pdf-image
2020-09-01 20:44:52
veracode
veracode
Remote Command Execution (RCE)
2018-05-30 06:09:31
prion
prion
Command injection
2018-06-01 19:29:00
hackerone
hackerone
Node.js third-party modules: Command injection in 'pdf-image'
2018-04-18 18:24:40
cvelist
cvelist
CVE-2018-3757
2018-05-31 00:00:00
cve
cve
CVE-2018-3757
2018-06-01 19:29:00
nvd
nvd
CVE-2018-3757
2018-06-01 19:29:00