PT-2023-22308 · Unknown · Huedawn-Tesseract+1
CVE-2023-29566
·
Publicado
2023-04-24
·
Atualizado
2025-02-04
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
huedawn-tesseract version 0.3.3
dawnsparks-node-tesseract versions 0.4.0 through 0.4.1
Description
The issue is related to a remote code execution (RCE) vulnerability via the
child process function.Recommendations
For huesdawn-tesseract version 0.3.3, update to a version that fixes the issue.
For dawnsparks-node-tesseract versions 0.4.0 through 0.4.1, update to a version later than 0.4.1.
As a temporary workaround, consider disabling the
child process function until a patch is available.Exploit
Correção
Command Injection
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Dawnsparks-Node-Tesseract
Huedawn-Tesseract