CVE-2020-18972

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.6

Description The issue is related to the exposure of sensitive information to unauthorized actors. It involves the IsNextToken function in the src/base/PdfToenizer.cpp component, which can be exploited by attackers to obtain sensitive information. The vulnerability is associated with the disclosure of information in an error data area, allowing a remote attacker to access confidential data.

Recommendations For PoDoFo version 0.9.6, consider restricting access to the IsNextToken function in the src/base/PdfToenizer.cpp component as a temporary workaround until a patch is available.