critical9.8
CVE-2021-38572
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
Impact
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxitsoftware | Foxit Reader | before 10.1.4 |
| Foxitsoftware | Phantompdf | before 10.1.4 |