Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/12/22 12:30 a.m.14 views

docconv OS Command Injection vulnerability

A vulnerability was found in docconv prior to version 1.2.1. It has been declared as critical. This vulnerability affects the function ConvertPDFImages of the file pdfocr.go. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely. Upgrading to...

9.8CVSS9.6AI score0.03837EPSS
Exploits0References8Affected Software2
OSV
OSV
added 2022/12/22 12:30 a.m.16 views

GHSA-6M4H-HFPP-X8CX docconv OS Command Injection vulnerability

A vulnerability was found in docconv prior to version 1.2.1. It has been declared as critical. This vulnerability affects the function ConvertPDFImages of the file pdfocr.go. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely. Upgrading to...

9.8CVSS9.9AI score0.03837EPSS
Exploits0References8
GitLab Advisory Database
GitLab Advisory Database
added 2022/12/22 12:0 a.m.24 views

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

A vulnerability was found in docconv up to 1.2.0. It has been declared as critical. This vulnerability affects the function ConvertPDFImages of the file pdfocr.go. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely. Upgrading to version 1.2.1...

9.8CVSS3.2AI score0.03837EPSS
Exploits0References8Affected Software1
NVD
NVD
added 2022/12/21 10:15 p.m.22 views

CVE-2022-4643

A vulnerability was found in docconv up to 1.2.0. It has been declared as critical. This vulnerability affects the function ConvertPDFImages of the file pdfocr.go. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely. Upgrading to version 1.2.1...

9.8CVSS0.03837EPSS
Exploits0References4
Prion
Prion
added 2022/12/21 10:15 p.m.19 views

Command injection

A vulnerability was found in docconv up to 1.2.0. It has been declared as critical. This vulnerability affects the function ConvertPDFImages of the file pdfocr.go. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely. Upgrading to version 1.2.1...

7.5CVSS9.9AI score0.03837EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2022/12/21 12:0 a.m.14 views

CVE-2022-4643 docconv pdf_ocr.go ConvertPDFImages os command injection

A vulnerability was found in docconv up to 1.2.0. It has been declared as critical. This vulnerability affects the function ConvertPDFImages of the file pdfocr.go. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely. Upgrading to version 1.2.1...

6.3CVSS10AI score0.03837EPSS
Exploits0References4
Rows per page
Query Builder