logo

Database

Lack of data validation In pdfkit

Description

PDFKit Improper Input Validation vulnerability Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2013-16072. NVD-2013-16073. OSV-2013-16074. GCVE-2013-1607

References

1. https://exchange.xforce.ibmcloud.com/vulnerabilities/825632. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pdfkit/CVE-2013-1607.yml3. https://web.archive.org/web/20200229104225/https://www.securityfocus.com/bid/58303/info

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.