PT-2023-19709 · Pdfbook · Pdfbook

Thomas Gerbet · Publicado 2023-01-30 · Atualizado 2023-02-07 · CVE-2023-24612

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PdfBook extension versions 2.0.5 and earlier

Description The issue allows command injection via an option.

Recommendations For PdfBook extension versions 2.0.5 and earlier, update to a version after b07b6a64 to resolve the issue.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2023-24612

Produtos afetados

Pdfbook

Referências · 5

• https://osv.dev/vulnerability/CVE-2023-24612 · Aviso do Fabricante
• https://gitlab.com/organicdesign/PdfBook/-/merge_requests/6 · Correção
• https://t.me/cvenotify/43796 · Publicação no Telegram
• https://t.me/cibsecurity/57139 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-24612 · Nota de Segurança