critical9.8
CVE-2018-3746
The pdfinfojs NPM module versions <= 0.3.6 has a command injection vulnerability that allows an attacker to execute arbitrary commands on the victim's machine.
Impact
The pdfinfojs NPM module versions <= 0.3.6 has a command injection vulnerability that allows an attacker to execute arbitrary commands on the victim's machine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pdfinfojs Project | Pdfinfojs | through 0.3.6 |