Description
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated.
Unscored
CVE-2021-38573
EUVD-2021-25015GHSA-ghjc-f7r9-q2f2
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname …
Published Aug 11, 2021 · Updated Aug 4, 2024 · Assigned by mitre