An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated.
References
Link | Resource |
---|---|
https://www.foxitsoftware.com/support/security-bulletins.php | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Aug 2021, 19:02
Type | Values Removed | Values Added |
---|---|---|
CWE | NVD-CWE-noinfo | |
References | (MISC) https://www.foxitsoftware.com/support/security-bulletins.php - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
CPE | cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:* cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:* |
11 Aug 2021, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-08-11 22:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-38572
Mitre link : CVE-2021-38572
CVE.ORG link : CVE-2021-38572
JSON object : View
Products Affected
foxitsoftware
- foxit_reader
- phantompdf
CWE