PT-2023-13006 · Avanquest · Rad Pdf+1
CVE-2022-30350
·
Publicado
2023-03-30
·
Atualizado
2023-04-10
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Avanquest Software RAD PDF (PDFEscape Online) version 3.19.2.2
Description
The PDFEscape Online tool has a "white out" functionality for redacting images, text, and other graphics from a PDF document. However, this mechanism does not remove underlying text or PDF object specification information from the PDF. As a result, redacted text may be copy-pasted by a PDF reader.
Recommendations
For version 3.19.2.2, consider using an alternative redaction method that completely removes sensitive information from the PDF document until a patch is available. As a temporary workaround, avoid using the "white out" functionality for redacting sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Pdfescape Online
Rad Pdf