5 matches found
CVE-2022-36231
pdfinfo 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3...
CVE-2022-36231
pdfinfo 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3...
CVE-2022-36231
pdfinfo 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3...
CVE-2022-36231
CVE-2022-36231 affects pdf_info 0.5.3, where Ruby code uses backticks instead of Open3, enabling Command Execution. CVSS v3.1 base score 9.8 (CRITICAL) with NETWORK attack vector, LOW complexity, no user interaction, and impact to confidentiality, integrity, and availability. Connected sources (R...
Exploit for OS Command Injection in Newspaperclub Pdf_Info
CVE-2022-36231 The ruby gem pdfinfohttps://rubygems.org/g...