PT-2021-23745

Name of the Vulnerable Software and Affected Versions iText versions prior to 7.1.17 Description The issue allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java. This can occur when a malicious filename is provided ...