CVE-2022-28104

Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload vulnerability

published May 20, 2022

CVSS
—
EPSS
2%
Percentile
79.8
In the wild
Unconfirmed
What it is

⚠️ Uploading files you never intended to! Foxit PDF Editor v11.3.1 has an arbitrary file upload vulnerability lurking within its layers. 🔥 Think of this as a hotel that lets guests check in with any package they want, without even looking inside. If someone sneaks in a suspicious bag, it could easily lead to chaos! An attacker could exploit this flaw to upload malicious files, potentially compromising the entire system. It’s like letting a stranger into your space with a suitcase full of surprises – some might be harmless, but others could wreak havoc!

Put simply

Think of this as a hotel that lets guests check in with any package they want, without even looking inside. If someone sneaks in a suspicious bag, it could easily lead to chaos! This vulnerability allows unauthorized file uploads due to insufficient validation mechanisms, making it possible for an attacker to upload any file type they desire.

What to do

An attacker could exploit this flaw to upload malicious files, potentially compromising the entire system. It’s like letting a stranger into your space with a suitcase full of surprises – some might be harmless, but others could wreak havoc! Ensure you're using the latest version of Foxit PDF Editor. Regularly review your security settings, and consider implementing stricter validation checks for file uploads. 🛡️ You've got this! Follow these steps to secure your PDF editor and keep your digital workspace safe! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01922 · 79.8th percentile
Published
2022-05-20T12:48Z
EPSS history
Timeline
  • 20 MAY 12:48Z
    Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload vulnerability
    cvelistv5