Pdfinfo
1 CVEs
product
Monthly
A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
RCE
Apache
Code Injection
Debian
Canonical
+4
NVD
CVSS 3.0
9.8
EPSS
10.8%
EPSS 11%
CVSS 9.8
CRITICAL
Act Now
A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
RCE
Apache
Code Injection
+6
NVD