Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Tao

#47640of 56,328
5.5Total CVSS
Vulnerabilities · 1
PT-2019-6172
5.5
2019-04-04
Podofo · Podofo · CVE-2020-18972
**Name of the Vulnerable Software and Affected Versions** PoDoFo version 0.9.6 **Description** The issue is related to the exposure of sensitive information to unauthorized actors. It involves the `IsNextToken` function in the `src/base/PdfToenizer.cpp` component, which can be exploited by attackers to obtain sensitive information. The vulnerability is associated with the disclosure of information in an error data area, allowing a remote attacker to access confidential data. **Recommendations** For PoDoFo version 0.9.6, consider restricting access to the `IsNextToken` function in the `src/base/PdfToenizer.cpp` component as a temporary workaround until a patch is available.