Skip to content
OpenAdvisories

Vendor

bpampuch

3 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 4.8

    pdfmake < 0.3.14 Shared Cache Access Policy Bypass

    pdfmake before 0.3.14 contains a shared resource caching vulnerability that allows attackers to access cross-document cached resources by exploiting a process-wide virtual file system keyed only by URL without request headers or per-document access enforcemen…

  • Medium 5.3

    pdfmake 0.3.8 before 0.3.12 Local File Policy Bypass via SVG Images

    pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to images referenced inside SVG content, allowing attackers to read blocked local files. Attackers supplying a document definition can add an SVG image href pointing to a local …