Vulnerability CVE-2022-25765


Published: 2022-09-09

Description:
The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
pdfkit v0.8.7.2 Command Injection
UNICORD (NicPWNs...
07.04.2023

Type:

CWE-78

(Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') )

 References:
https://github.com/pdfkit/pdfkit/blob/master/lib/pdfkit/source.rb%23L44-L50
https://security.snyk.io/vuln/SNYK-RUBY-PDFKIT-2869795
https://github.com/pdfkit/pdfkit/blob/46cdf53ec540da1a1a2e4da979e3e5fe2f92a257/lib/pdfkit/pdfkit.rb%23L55-L58

Copyright 2024, cxsecurity.com

 

Back to Top