PT-2023-19709 · Pdfbook · Pdfbook

Thomas Gerbet · Published 2023-01-30 · Updated 2023-02-07 · CVE-2023-24612

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PdfBook extension versions 2.0.5 and earlier

Description The issue allows command injection via an option.

Recommendations For PdfBook extension versions 2.0.5 and earlier, update to a version after b07b6a64 to resolve the issue.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2023-24612

Affected Products

Pdfbook

References · 5

• https://osv.dev/vulnerability/CVE-2023-24612 · Vendor Advisory
• https://gitlab.com/organicdesign/PdfBook/-/merge_requests/6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-24612 · Security Note
• https://t.me/cvenotify/43796 · Telegram Post
• https://t.me/cibsecurity/57139 · Telegram Post