critical9.8
CVE-2021-38573
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
Impact
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxitsoftware | Foxit Reader | before 10.1.4 |
| Foxitsoftware | Phantompdf | before 10.1.4 |