CVE-2022-36231

pdfinfo 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3...

Command Injection

pdfinfo is vulnerable to Command Injection. The vulnerability exists in the command function of info.rb due to missing input sanitization in the pdfpath parameter, which allows an attacker to inject and execute malicious commands...

Code injection in pdf_info

pdfinfo 0.5.3 is vulnerable to Command Execution. An attacker using a specially crafted payload may execute OS commands by using command chaining because during object initalization there is no validation performed and the user provided path is used...

GHSA-9FH3-J99M-F4V7 Code injection in pdf_info

pdfinfo 0.5.3 is vulnerable to Command Execution. An attacker using a specially crafted payload may execute OS commands by using command chaining because during object initalization there is no validation performed and the user provided path is used...

Code injection in pdf_info

pdfinfo 0.5.3 is vulnerable to Command Execution. An attacker using a specially crafted payload may execute OS commands by using command chaining because during object initalization there is no validation performed and the user provided path is used...

CVE-2022-36231

pdfinfo 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3...

Command injection

pdfinfo 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3...

CVE-2022-36231

pdfinfo 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3...

CVE-2022-36231

CVE-2022-36231 affects pdf_info 0.5.3, where Ruby code uses backticks instead of Open3, enabling Command Execution. CVSS v3.1 base score 9.8 (CRITICAL) with NETWORK attack vector, LOW complexity, no user interaction, and impact to confidentiality, integrity, and availability. Connected sources (R...

CVE-2022-36231

pdfinfo 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3...

pdf_info 安全漏洞

pdfinfo is a package pdfinfo command line tool by tomtaylor personal developer. A security vulnerability exists in pdfinfo version 0.5.3, which can be exploited by an attacker to execute operating system commands using a command chain...