← Database

CVE-2021-43113

CRITICAL CVSS: 9.8 Published: 2021-12-15 Modified: 2026-06-17

Description

iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.

Affected Platforms

Debian Debian LinuxItextpdf Itext

Weakness Type

CWE-77, CWE-77

References