Skip to content
OpenAdvisories
High · 7.7 CVE-2026-119431 EUVD-2026-117887GHSA-xhm2-fgqq-m8xc

Server-Side Request Forgery in Foxit Workspace File Upload

Published Nov 6, 2026 · Updated Nov 10, 2026 · Assigned by Foxit

Description

A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their contents, potentially resulting in sensitive information disclosure and unauthorized access to internal services.

Affected products

VendorProductAffectedFixed
Foxit Software Foxit Workspace before 2026-11-6 —

References