5 matches found
CVE-2022-36231
pdfinfo 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3...
9.8CVSS7.2AI score0.03014EPSS
SaveExploits2
CVE-2022-36231
CVE-2022-36231 affects pdf_info 0.5.3, where Ruby code uses backticks instead of Open3, enabling Command Execution. CVSS v3.1 base score 9.8 (CRITICAL) with NETWORK attack vector, LOW complexity, no user interaction, and impact to confidentiality, integrity, and availability. Connected sources (R...
9.8CVSS9.5AI score0.03014EPSS
SaveExploits2References4Affected Software1
CVE-2022-36231
pdfinfo 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3...
9.7AI score0.03014EPSS
SaveExploits2References4
20