Command Injection

com.itextpdf:io is vulnerable to command injection. An attacker is able to inject and execute malicious commands on vulnerable systems due to a mishandled CompareTool filename on the ghostscript command line in GhostscriptHelper.java...