exploitDog

CVE-2022-36231

Опубликовано: 23 фев. 2023

Источник: nvd

CVSS3: 9.8

EPSS Средний

Описание

pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.

Ссылки

https://github.com/affix/CVE-2022-36231
Exploit
Third Party Advisory
https://github.com/newspaperclub/pdf_info/issues/16
Patch
https://github.com/newspaperclub/pdf_info/pull/15
Patch
https://rubygems.org/gems/pdf_info
Product
https://github.com/affix/CVE-2022-36231
Exploit
Third Party Advisory
https://github.com/newspaperclub/pdf_info/issues/16
Patch
https://github.com/newspaperclub/pdf_info/pull/15
Patch
https://rubygems.org/gems/pdf_info
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:newspaperclub:pdf_info:0.5.3:*:*:*:*:ruby:*:*

EPSS

Процентиль: 96%

0.27288

Средний

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-78

Связанные уязвимости

GHSA-9fh3-j99m-f4v7

CVSS3: 9.8

github

почти 3 года назад

Code injection in pdf_info

EPSS

Процентиль: 96%

0.27288

Средний

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-78