Mrfathoni

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Services API (affected versions not specified) **Description** The PDF creation feature allows referencing external files. An attacker can trigger a Server-Side Request Forgery (SSRF)—a flaw where the server is coerced into making unauthorized requests—by using URL redirection to bypass validation, which can result in information disclosure. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** An issue exists where the application fails to intercept certain dangerous interfaces when executing JavaScript scripts embedded in PDF files within the sandbox. This failure allows remote scripts to be loaded, which can lead to arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.