← Back to browse · API

CVE-2022-36231

Severity

CRITICAL

CVSS

9.8

EPSS

0.03014

Risk score

40.25

CISA KEV

No

PoC

No

Published

2023-02-23

Modified

2025-03-13

First seen

2026-08-07

Aliases

EUVD-2023-0676, GHSA-9FH3-J99M-F4V7

Products

n/a:n/a n/a

Sources

euvd EUVD-2023-0676

Description

pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.

References