Read the docs

Pdfinfojs Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Pdfinfojs Project records in CISA KEV

No Pdfinfojs Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pdfinfojs 1 record MEDIUM

Records

1 record in Pdfinfojs · all components

TI-2018-02742 CVE-2018-3746 · GHSA-3pxp-6963-46r9

Command injection in HackerOne pdfinfojs

Priority MEDIUM 50

The pdfinfojs NPM module versions <= 0.3.6 has a command injection vulnerability that allows an attacker to execute arbitrary commands on the victim's machine.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04853 Published 2018-06-01 Fixed in 0.4.1 CWE-77
Open these records in search →