Lucene search
GoogleOSV:GHSA-3PXP-6963-46R9HistoryJun 07, 2018 - 7:43 p.m.
Command Injection in pdfinfojs
2018-06-0719:43:00
Google
osv.dev
9
0.004 Low
EPSS
Percentile
72.4%
Versions of pdfinfojs before 0.4.1 are vulnerable to command injection. This is exploitable if an attacker can control the filename parameter that is passed into the pdfinfojs constructor.
Recommendation
Update to version 0.4.1 or later.
Related
hackerone
hackerone
cve
cve
CVE-2018-3746
2018-06-01 17:29:00
nodejs
nodejs
Command Injection
2018-05-16 16:01:00
veracode
veracode
Command Injection
2018-04-20 02:52:32
prion
prion
Command injection
2018-06-01 17:29:00
github
github
Command Injection in pdfinfojs
2018-06-07 19:43:00
Command Injection in standard-version
2020-07-13 21:34:59
nvd
nvd
CVE-2018-3746
2018-06-01 17:29:00
cvelist
cvelist
CVE-2018-3746
2018-06-01 17:00:00
osv
osv
Command Injection in standard-version
2020-07-13 21:34:59