PT-2022-27870

CVE-2022-4643

تاريخ النشر

2022-12-21

تاريخ التحديث

2024-05-17

الوصف من

CVSS 3.1

6.3

متوسطة

المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions docconv versions prior to 1.2.1

Description A critical issue affects the function ConvertPDFImages of the file pdf ocr.go. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely.

Recommendations For versions prior to 1.2.1, upgrade to version 1.2.1 to address this issue. As a temporary workaround, consider restricting the use of the ConvertPDFImages function until the upgrade is applied.

قابلية الاستغلال

استغلال

إصلاح

التأثيرات

الباحثون

Govulnbot

المورّدون

المنتجات المتأثرة

تصنيف نقاط الضعف

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

المعرّفات ذات الصلة

CVE-2022-4643