Early Access — Mondoo Vulnerability Intelligence is currently in preview.
gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.
Exploitability
AV:LAC:LPR:NUI:NScope
S:UImpact
C:LI:NA:N4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NOther