{"id":"GHSA-xq29-jcj7-xg86","aliases":["CVE-2010-4962"],"title":"Webkit PDFs for TYPO3  allows remote attackers to execute arbitrary commands","description":"Unspecified vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors.","severity":"high","score":8.1,"published":"2022-05-17T01:56:34.000Z","modified":"2025-04-12T02:27:09.367Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"dmk/webkitpdf","ranges":[{"events":[{"introduced":"0"},{"fixed":"1.1.4"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.1.4"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2010-4962","https://exchange.xforce.ibmcloud.com/vulnerabilities/61058","https://github.com/DMKEBUSINESSGMBH/webkitpdf","https://web.archive.org/web/20101218181134/http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015","https://web.archive.org/web/20111015170040/http://www.securityfocus.com/bid/42381","http://typo3.org/extensions/repository/view/webkitpdf/1.1.4"],"sources":[{"name":"OSV","id":"GHSA-xq29-jcj7-xg86","modified":"2025-04-12T02:27:09.367310Z","url":"https://osv.dev/vulnerability/GHSA-xq29-jcj7-xg86"}],"assessments":[{"source":"OSV","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","score":8.1}]}