Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to pdfmake [CVE-2022-46161]

Summary Vulnerability in pdfmake allow remote attacker to execute arbitrary code on the system which could affect IBM Spectrum Control. CVE-2022-46161 IBM has addressed this vulnerability. Vulnerability Details CVEID:CVE-2022-46161 DESCRIPTION: Node.js pdfmake module could allow a remote attacker...

CVE-2022-46161

CVE-2022-46161 affects the pdfmake library (client/server side PDF generation in pure JavaScript). The issue is an unsafe evaluation of user-controlled input in pdfmake versions up to and including 0.2.5, which can allow arbitrary code execution in the running process. Documents consistently stat...