{"id":"CVE-2022-25765","aliases":["EUVD-2022-6937","GHSA-rhwx-hjx2-x4qr"],"status":"published","title":"Command Injection","description":"The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.42503,"percentile":0.98717,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-77"],"published":"2022-09-09T05:00:15Z","modified":"2026-06-17T04:34:14Z","exploits":[{"source":"pocgithub","id":"Jeanback1/CVE-2022-25765-exploit","title":"Jeanback1/CVE-2022-25765-exploit","date":"2026-05-31","url":"https://github.com/Jeanback1/CVE-2022-25765-exploit"},{"source":"pocgithub","id":"LordRNA/CVE-2022-25765","title":"LordRNA/CVE-2022-25765","date":"2022-12-11","url":"https://github.com/LordRNA/CVE-2022-25765"},{"source":"pocgithub","id":"PurpleWaveIO/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell","title":"PurpleWaveIO/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell","date":"2022-12-04","url":"https://github.com/PurpleWaveIO/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell"},{"source":"pocgithub","id":"UNICORDev/exploit-CVE-2022-25765","title":"UNICORDev/exploit-CVE-2022-25765","date":"2023-02-10","url":"https://github.com/UNICORDev/exploit-CVE-2022-25765"},{"source":"pocgithub","id":"Wai-Yan-Kyaw/PDFKitExploit","title":"Wai-Yan-Kyaw/PDFKitExploit","date":"2022-12-07","url":"https://github.com/Wai-Yan-Kyaw/PDFKitExploit"},{"source":"pocgithub","id":"innocentx0/CVE-2022-25765","title":"innocentx0/CVE-2022-25765","date":"2026-09-02","url":"https://github.com/innocentx0/CVE-2022-25765"},{"source":"pocgithub","id":"lekosbelas/PDFkit-CMD-Injection","title":"lekosbelas/PDFkit-CMD-Injection","date":"2023-02-21","url":"https://github.com/lekosbelas/PDFkit-CMD-Injection"},{"source":"pocgithub","id":"lowercasenumbers/CVE-2022-25765","title":"lowercasenumbers/CVE-2022-25765","date":"2024-01-22","url":"https://github.com/lowercasenumbers/CVE-2022-25765"},{"source":"pocgithub","id":"nikn0laty/PDFkit-CMD-Injection-CVE-2022-25765","title":"nikn0laty/PDFkit-CMD-Injection-CVE-2022-25765","date":"2023-01-29","url":"https://github.com/nikn0laty/PDFkit-CMD-Injection-CVE-2022-25765"},{"source":"pocgithub","id":"shamo0/PDFkit-CMD-Injection","title":"shamo0/PDFkit-CMD-Injection","date":"2022-12-20","url":"https://github.com/shamo0/PDFkit-CMD-Injection"}],"fixes":[{"ecosystem":"RubyGems","package":"pdfkit","fixed_in":["0.8.7.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"pdfkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7.2"}]}]},{"source":"osv","ecosystem":"RubyGems","package":"pdfkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7.2"}]}],"versions":["0.1.0","0.1.1","0.2.0","0.2.1","0.2.2","0.2.3","0.3.0","0.3.1","0.3.2","0.3.3","0.4.0","0.4.1","0.4.2","0.4.3","0.4.4","0.4.5","0.4.6","0.5.0","0.5.1","0.5.2","0.5.3","0.5.4","0.6.1","0.6.2","0.7.0","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.8.4.1","0.8.4.2","0.8.4.3.1","0.8.4.3.2","0.8.5","0.8.6","0.8.7","0.8.7.1"]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"pdfkit_project","product":"pdfkit"}],"references":[{"url":"https://security.snyk.io/vuln/SNYK-RUBY-PDFKIT-2869795","tags":["x_transferred","Exploit","Third Party Advisory","web"]},{"url":"https://github.com/pdfkit/pdfkit/blob/master/lib/pdfkit/source.rb%23L44-L50","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://github.com/pdfkit/pdfkit/blob/46cdf53ec540da1a1a2e4da979e3e5fe2f92a257/lib/pdfkit/pdfkit.rb%23L55-L58","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JFB2BFKH5SUGRKXMY6PWRQNGKZML7GDT/","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ESWB6SX7HYWQ54UGBGQOZ7G24O6RAOKD/","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C36GAV3TKM3JXV6UVMLMTTDRCPKSNETQ/","tags":["vendor-advisory","x_transferred"]},{"url":"http://packetstormsecurity.com/files/171746/pdfkit-0.8.7.2-Command-Injection.html","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25765","tags":["advisory"]},{"url":"https://github.com/pdfkit/pdfkit/blob/46cdf53ec540da1a1a2e4da979e3e5fe2f92a257/lib/pdfkit/pdfkit.rb#L55-L58","tags":["web"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pdfkit/CVE-2022-25765.yml","tags":["web"]},{"url":"https://github.com/pdfkit/pdfkit/releases/tag/v0.8.7","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ESWB6SX7HYWQ54UGBGQOZ7G24O6RAOKD/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JFB2BFKH5SUGRKXMY6PWRQNGKZML7GDT/"},{"url":"https://github.com/pdfkit/pdfkit/issues/517","tags":["web"]},{"url":"https://github.com/pdfkit/pdfkit/pull/519","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C36GAV3TKM3JXV6UVMLMTTDRCPKSNETQ/"},{"url":"https://github.com/advisories/GHSA-rhwx-hjx2-x4qr"},{"url":"https://github.com/pdfkit/pdfkit","tags":["package"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C36GAV3TKM3JXV6UVMLMTTDRCPKSNETQ","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ESWB6SX7HYWQ54UGBGQOZ7G24O6RAOKD","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JFB2BFKH5SUGRKXMY6PWRQNGKZML7GDT","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-25765","title":"Command Injection","description":"The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.","status":"published","published":"2022-09-09T05:00:15.097Z","modified":"2024-09-16T16:47:50.441Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:34:28.707644Z"}],"euvd":[{"id":"EUVD-2022-6937","description":"The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.","status":"published","published":"2022-09-09T05:00:15Z","modified":"2024-09-16T16:47:50Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P","level":"high"}],"updated_at":"2026-11-03T00:55:48.234114Z"}],"ghsa":[{"id":"GHSA-rhwx-hjx2-x4qr","title":"PDFKit vulnerable to Command Injection","description":"The package pdfkit is vulnerable to Command Injection where the URL is not properly sanitized.\n\nNote: This issue was patched in 0.8.7.2, but the patch was discovered to be ineffective. The updated patch version is 0.8.7.2.","status":"published","published":"2022-09-10T00:00:32Z","modified":"2023-08-28T16:05:39Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:37:01.345964Z"}],"nvd":[{"id":"CVE-2022-25765","description":"The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.","status":"published","published":"2022-09-09T05:15:07.713Z","modified":"2026-06-17T04:34:14.39Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"updated_at":"2026-11-02T14:07:27.631109Z"}],"osv":[{"id":"GHSA-rhwx-hjx2-x4qr","title":"PDFKit vulnerable to Command Injection","description":"The package pdfkit is vulnerable to Command Injection where the URL is not properly sanitized.\n\nNote: This issue was patched in 0.8.7.2, but the patch was discovered to be ineffective. The updated patch version is 0.8.7.2.","status":"published","published":"2022-09-10T00:00:32Z","modified":"2024-02-19T05:23:14.114042Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T15:46:55.877614Z"}]}}