Command Injection

com.itextpdf:io is vulnerable to command injection. An attacker is able to inject and execute malicious commands on vulnerable systems due to a mishandled CompareTool filename on the ghostscript command line in GhostscriptHelper.java...

CVE-2021-43113: Improper Neutralization of Special Elements used in a Command

iTextPDF in iText 7 and up to excluding 4.4.13.3 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...

CVE-2021-43113

iTextPDF in iText 7 and up to excluding 4.4.13.3 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...