CVE-2021-43113

iTextPDF in iText before 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.

Date published : 2021-12-15

https://github.com/itext/itext7/releases/tag/7.1.17

https://pastebin.com/BXnkY9YY