2 matches found
Code injection in pdf_info
pdfinfo 0.5.3 is vulnerable to Command Execution. An attacker using a specially crafted payload may execute OS commands by using command chaining because during object initalization there is no validation performed and the user provided path is used...
CVE-2022-36231
pdfinfo 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3...