Vendor
bpampuch
3 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Medium 4.8
pdfmake < 0.3.14 Shared Cache Access Policy Bypass
pdfmake before 0.3.14 contains a shared resource caching vulnerability that allows attackers to access cross-document cached resources by exploiting a process-wide virtual file system keyed only by URL without request headers or per-document access enforcemen…
-
Medium 5.3
pdfmake 0.3.8 before 0.3.12 Local File Policy Bypass via SVG Images
pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to images referenced inside SVG content, allowing attackers to read blocked local files. Attackers supplying a document definition can add an SVG image href pointing to a local …