CVE-2021-38572

2021-08-1121:13:19

mitre

www.cve.org

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.6%

JSON

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated.

References

www.foxitsoftware.com/support/security-bulletins.php