Lucene search
Caio LüdersNODEJS:643HistoryMay 16, 2018 - 4:01 p.m.
Command Injection
2018-05-1616:01:00
Caio Lüders
www.npmjs.com
505
0.004 Low
EPSS
Percentile
72.4%
Overview
Versions of pdfinfojs before 0.4.1 are vulnerable to command injection. This is exploitable if an attacker can control the filename parameter that is passed into the pdfinfojs constructor.
Recommendation
Update to version 0.4.1 or later.
References
Related
hackerone
hackerone
cve
cve
CVE-2018-3746
2018-06-01 17:29:00
veracode
veracode
Command Injection
2018-04-20 02:52:32
prion
prion
Command injection
2018-06-01 17:29:00
github
github
Command Injection in pdfinfojs
2018-06-07 19:43:00
Command Injection in standard-version
2020-07-13 21:34:59
nvd
nvd
CVE-2018-3746
2018-06-01 17:29:00
osv
osv
Command Injection in pdfinfojs
2018-06-07 19:43:00
Command Injection in standard-version
2020-07-13 21:34:59
cvelist
cvelist
CVE-2018-3746
2018-06-01 17:00:00