Description
The pdfinfojs NPM module versions <= 0.3.6 has a command injection vulnerability that allows an attacker to execute arbitrary commands on the victim's machine.
Remediation
References
https://hackerone.com/reports/330957
Related Vulnerabilities
CVE-2016-5005 Vulnerability in maven package org.apache.archiva:archiva
CVE-2022-29244 Vulnerability in npm package npm
CVE-2023-41037 Vulnerability in maven package org.webjars.bowergithub.openpgpjs:openpgpjs
CVE-2021-45456 Vulnerability in maven package org.apache.kylin:kylin-server-base
CVE-2022-36898 Vulnerability in maven package com.compuware.jenkins:compuware-ispw-operations