Advisories · Technology
MITHALDU PDF::WebKit.
Every CVE that names MITHALDU PDF::WebKit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet paths in _style_tag_for
- MITHALDU PDF::WebKit
- Path traversal
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document
- MITHALDU PDF::WebKit
- Command injection