pdf-image Node.js Arbitrary Command Execution

The vulnerability of the GetInfoCommand function in the PDF conversion software for Node.js lies in the lack of mechanisms to neutralize special elements in the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

PT-2018-1369

Name of the Vulnerable Software and Affected Versions pdf-image versions prior to 2.0.0 Description The issue is related to the lack of neutralization of special elements in input data for the GetInfoCommand function in the pdf-image tool for Node.js. This can be exploited by a remote attacker to...