PT-2021-22221
CVE-2021-38572
·
تاريخ النشر
2021-08-11
·
تاريخ التحديث
2021-08-12
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Foxit Reader and PhantomPDF versions prior to 10.1.4
Description
The issue allows writing to arbitrary files due to the lack of validation of the extractPages pathname.
Recommendations
For Foxit Reader and PhantomPDF versions prior to 10.1.4, update to version 10.1.4 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾