PT-2018-1370 · Pdfinfojs · Pdfinfojs

Caioluders · Published 2018-04-19 · Updated 2023-01-30 · CVE-2018-3746

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions pdfinfojs versions <= 0.3.6 pdfinfojs versions prior to 0.4.1

Description The issue is related to a lack of neutralization of special elements in input commands for the pdfinfojs module. This can be exploited by a remote attacker to execute arbitrary code using a specially crafted request. The vulnerability is exploitable if an attacker can control the filename parameter passed into the pdfinfojs constructor, allowing the execution of arbitrary commands on the victim's machine.

Recommendations For pdfinfojs versions <= 0.3.6, update to version 0.4.1 or later. For pdfinfojs versions prior to 0.4.1, update to version 0.4.1 or later. As a temporary workaround, consider restricting access to the filename parameter in the pdfinfojs constructor to minimize the risk of exploitation.

Exploit

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2018-00913

CVE-2018-3746

GHSA-3PXP-6963-46R9

Affected Products

Pdfinfojs

References · 8

• 🔥 https://hackerone.com/reports/330957 · Exploit
• https://osv.dev/vulnerability/GHSA-3pxp-6963-46r9 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-3746 · Security Note
• https://osv.dev/vulnerability/CVE-2018-3746 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00913 · Security Note
• https://github.com/fagbokforlaget/pdfinfojs/commit/5cc59cd8aa13ca8d16bb41da8affdfef370ad4fd · Note
• https://npmjs.com/advisories/643 · Note
• https://github.com/advisories/GHSA-3pxp-6963-46r9 · Note