critical9.8
CVE-2021-38574
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
Impact
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxitsoftware | Foxit Reader | before 10.1.4 |
| Foxitsoftware | Phantompdf | before 10.1.4 |