CVE-2022-46161

CVE-2022-46161 affects the pdfmake library (client/server side PDF generation in pure JavaScript). The issue is an unsafe evaluation of user-controlled input in pdfmake versions up to and including 0.2.5, which can allow arbitrary code execution in the running process. Documents consistently stat...

CVE-2022-46161 Code injection in pdfmake

pdfmake is an open source client/server side PDF printing in pure JavaScript. In versions up to and including 0.2.5 pdfmake contains an unsafe evaluation of user controlled input. Users of pdfmake are thus subject to arbitrary code execution in the context of the process running the pdfmake code...

CVE-2022-46161 Code injection in pdfmake

pdfmake is an open source client/server side PDF printing in pure JavaScript. In versions up to and including 0.2.5 pdfmake contains an unsafe evaluation of user controlled input. Users of pdfmake are thus subject to arbitrary code execution in the context of the process running the pdfmake code...

PT-2022-27778

Name of the Vulnerable Software and Affected Versions pdfmake versions up to and including 0.2.5 Description pdfmake contains an unsafe evaluation of user-controlled input, which can lead to arbitrary code execution in the context of the process running the pdfmake code. Users are advised to...

pdfmake 安全漏洞

pdfmake is Bartek Pampuch individual developers of a pure JavaScript server-side and client-side PDF document generation library . A security vulnerability exists in pdfmake version 0.2.5 and earlier versions, which stems from a lack of strict control over user input. An attacker can exploit this...

CVE-2022-46161: Improper Control of Generation of Code

pdfmake is an open source client/server side PDF printing in pure JavaScript. In versions up to and including 0.2.5 pdfmake contains an unsafe evaluation of user controlled input. Users of pdfmake are thus subject to arbitrary code execution in the context of the process running the pdfmake code...