← Back to browse · API

CVE-2022-29851

Severity
CRITICAL
CVSS
9.8
EPSS
0.03634
Risk score
40.47
CISA KEV
No
PoC
No
Published
2022-10-24
Modified
2025-05-07
First seen
2026-08-07
Aliases
EUVD-2022-34169, GHSA-5WGQ-VG66-44CM
Products
n/a:n/a n/a
Sources
euvd EUVD-2022-34169

Description

documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occur for an EPS document that is disguised as a PDF document.

References