Files
CVEs-PoC/2021/CVE-2021-43113.md
T
2024-05-25 21:48:12 +02:00

654 B

CVE-2021-43113

Description

iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.

POC

Reference

Github