CVE-2018-3746 - AskarLabs CVE Database

CVE-2018-3746

Vendor Hackerone

Product pdfinfojs

Weakness CWE-77

Published June 1, 2018

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The pdfinfojs NPM module versions <= 0.3.6 has a command injection vulnerability that allows an attacker to execute arbitrary commands on the victim's machine.

Key dates

02Disclosure timeline

June 1, 2018 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-3746 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/77.html

Related vulnerabilities

04Related CVE

CVE-2026-26093 Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds CVE-2025-46428 CVE-2024-20365 Cisco Integrated Management Controller Redfish Command Injection Vulnerability CVE-2024-3154 Cri-o: arbitrary command injection via pod annotation CVE-2025-47959 Visual Studio Remote Code Execution Vulnerability