CVE-2023-38091

CVE-2023-38091 concerns Kofax Power PDF. A type confusion in the implementation of the app.response method allows remote code execution and requires user interaction (target must open a malicious page/file). The root cause is improper validation of user-supplied data, enabling code execution in t...