Lucene search
Veracode Vulnerability DatabaseVERACODE:38578HistoryDec 23, 2022 - 7:54 a.m.
Remote Code Execution
2022-12-2307:54:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
remote code execution
github
pdfhasimage
pdf_ocr_go
software vulnerability
0.002 Low
EPSS
Percentile
54.4%
github.com/sajari/docconv is vulnerable to remote code execution. Lack of proper checking of exec.Command in PDFHasImage function of the file pdf_ocr.go allows an attacker to upload and execute malicious code on the system under attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/sajari/docconv | le | v1.2.0 | |
| github.com/sajari/docconv | le | v1.2.0 |
Related
cve
cve
CVE-2022-4643
2022-12-21 22:15:08
github
github
docconv OS Command Injection vulnerability
2022-12-22 00:30:36
osv
osv
OS command injection vulnerability in code.sajari.com/docconv
2022-12-27 18:18:39
CVE-2022-4643
2022-12-21 22:15:08
docconv OS Command Injection vulnerability
2022-12-22 00:30:36
cvelist
cvelist
CVE-2022-4643 docconv pdf_ocr.go ConvertPDFImages os command injection
2022-12-21 00:00:00
gitlab
gitlab
prion
prion
Command injection
2022-12-21 22:15:00
nvd
nvd
CVE-2022-4643
2022-12-21 22:15:08