PT-2022-6098 · Pdfkit · Pdfkit

🗓️ 09 Sep 2022 00:00:00Reported by Positive TechnologiesType

Pdfkit versions 0.0.0–0.8.7.2 are vulnerable to remote command injection via URL handling; upgrade beyond 0.8.7.2.

Reporter	Title	Published	Views	Family All 32
GithubExploit	Exploit for CVE-2022-25765	31 May 202616:05	–	githubexploit
GithubExploit	Exploit for CVE-2022-25765	11 Dec 202523:13	–	githubexploit
GithubExploit	Exploit for CVE-2022-25765	29 Jan 202310:36	–	githubexploit
GithubExploit	Exploit for CVE-2022-25765	11 Dec 202214:02	–	githubexploit
GithubExploit	Exploit for CVE-2022-25765	10 Feb 202300:50	–	githubexploit
GithubExploit	Exploit for CVE-2022-25765	4 Dec 202221:00	–	githubexploit
GithubExploit	Exploit for CVE-2022-25765	22 Jan 202414:45	–	githubexploit
0day.today	pdfkit v0.8.7.2 - Command Injection Exploit	6 Apr 202300:00	–	zdt
ATTACKERKB	CVE-2022-25765	9 Sep 202205:00	–	attackerkb
Circl	CVE-2022-25765	4 Dec 202221:05	–	circl

Source	Link
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/pdfkit/CVE-2022-25765.yml
github	www.github.com/PurpleWaveIO/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell
github	www.github.com/CyberArchitect1/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell
github	www.github.com/UNICORDev/exploit-CVE-2022-25765
github	www.github.com/nikn0laty/PDFkit-CMD-Injection-CVE-2022-25765
github	www.github.com/shamo0/PDFkit-CMD-Injection
github	www.github.com/LordRNA/CVE-2022-25765
exploit-db	www.exploit-db.com/exploits/51293
security	www.security.snyk.io/vuln/SNYK-RUBY-PDFKIT-2869795
web	www.web.archive.org/web/20250000000000*/https:/github.com/Atsukoro1/PDFKitExploit

01 Jan 2024 00:00Current

9.6High risk

Vulners AI Score9.6

CVSS 3.17.3 - 9.8

EPSS0.88767