VULNERABILITY INTELLIGENCE

CVE-2022-36231

CVSS score9.8 CRITICAL

EPSS probability3.01%

CISA KEVNot currently listed

Published2023-02-23

Last modified2026-06-17

Description

pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.