CVE-2020-8132

n/a / pdf-image PUBLISHED

Description (CNA)

Lack of input validation in pdf-image npm package version <= 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input.

Affected (CNA)

Vendor / product	Versions
n/a / pdf-image	affected Not Fixed

CWE

CWE-94

References

https://hackerone.com/reports/781664

ADP enrichment

CVE

No English description supplied.

https://hackerone.com/reports/781664