Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
iText 命令注入漏洞
Vulnerability Description
iText是Java中用于创建和操作PDF文件的开源库。它是由Bruno Lowagie、Paulo Soares等人编写的。 iText 7.1.17 之前的版本中的 iTextPDF 存在命令注入漏洞，该漏洞允许攻击者通过在 GhostscriptHelper.java 中的 gs（又名 Ghostscript）命令行上处理不当的 CompareTool 文件名进行命令注入。
CVSS Information
N/A
Vulnerability Type
N/A