CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).

• https://bugs.ghostscript.com/show_bug.cgi?id=707051Permissions Required
• https://ghostscript.com/Product
• https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=e59216049cac290fb437a04c4f41ea46826cfba5Broken Link
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IK3UXJ5HKMPAL5EQELJAWSRPA2AUOJJO/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PG5AQV7JOL5TAU76FWPJCMSKO5DREKV5/Mailing List
• https://bugs.ghostscript.com/show_bug.cgi?id=707051Permissions Required
• https://ghostscript.com/Product
• https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=e59216049cac290fb437a04c4f41ea46826cfba5Broken Link
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IK3UXJ5HKMPAL5EQELJAWSRPA2AUOJJO/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PG5AQV7JOL5TAU76FWPJCMSKO5DREKV5/Mailing List

Published

Sep 18, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-43091A flaw was found in GNOME Maps, which is vulnerable to a cod…9.8
• CVE-2023-4310BeyondTrust Privileged Remote Access (PRA) and Remote Suppor…9.8
• CVE-2023-43102An issue was discovered in Zimbra Collaboration (ZCS) before…6.1
• CVE-2023-43103An XSS issue was discovered in a web endpoint in Zimbra Coll…6.1
• CVE-2023-4311The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 i…8.8
• CVE-2023-43114An issue was discovered in Qt before 5.15.16, 6.x before 6.2…5.5
• CVE-2023-43116A symbolic link following vulnerability in Buildkite Elastic…7.8
• CVE-2023-43118Cross Site Request Forgery (CSRF) vulnerability in Chalet ap…8.8
• CVE-2023-43119An Access Control issue discovered in Extreme Networks Switc…9.8
• CVE-2023-43120An issue discovered in Extreme Networks Switch Engine (EXOS)…8.8
• CVE-2023-43121A Directory Traversal vulnerability discovered in Chalet app…7.5
• CVE-2023-43122Samsung Mobile Processor and Wearable Processor (Exynos 980,…4.6