Podatność CVE-2022-25765
Publikacja: 2022-09-09

Opis:
The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.

W naszej bazie, znaleźliśmy następujące noty dla tego CVE:
Tytuł
Autor
Data
Med.
pdfkit v0.8.7.2 Command Injection
UNICORD (NicPWNs...
07.04.2023

Typ:

CWE-78

 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') )

 Referencje:
https://github.com/pdfkit/pdfkit/blob/master/lib/pdfkit/source.rb%23L44-L50
https://security.snyk.io/vuln/SNYK-RUBY-PDFKIT-2869795
https://github.com/pdfkit/pdfkit/blob/46cdf53ec540da1a1a2e4da979e3e5fe2f92a257/lib/pdfkit/pdfkit.rb%23L55-L58
Copyright 2024, cxsecurity.com

 

Back to Top