Lucene search
Veracode Vulnerability DatabaseVERACODE:36583HistoryAug 03, 2022 - 9:04 a.m.
Command Injection
2022-08-0309:04:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
command injection
node.js
source file
compilation
execution
insecure handling
malicious commands
EPSS
0.003
Percentile
65.2%
node-latex-pdf is vulnerable to command injection. Insecure handling of compilation and execution of source file in selflatex function in node-latex-pdf.js allows an attacker to inject and execute malicious commands.
Related
cvelist
cvelist
CVE-2020-28433 Command Injection
2022-08-02 13:27:18
nvd
nvd
CVE-2020-28433
2022-08-02 14:15:09
prion
prion
Code injection
2022-08-02 14:15:00
cve
cve
CVE-2020-28433
2022-08-02 14:15:09
osv
osv
node-latex-pdf is susceptible to command injection
2022-08-03 00:00:57
github
github
node-latex-pdf is susceptible to command injection
2022-08-03 00:00:57