CVE-2022-36231

CVE-2022-36231 The ruby gem pdfinfo = 0.5.3 is vulnerable to OS Command Injection when executing a method on a PDF::Info object. An attacker using a specially crafted payload may execute OS commands by using command chaining. Vulnerability Analysis When creating a new PDF::Info object the...