High · published December 11, 2025
⚡ An attacker can compromise Foxit PDF and Editor just by altering a static HTML file used by the StartPage feature! 🛠️ Think of it like a café that hangs a new menu outside without checking who put it there — one sneaky change can lead patrons to a dish they absolutely don’t want! 🍽️ This could allow an attacker to load malicious content on startup, leading to unauthorized data access or even sensitive information exposure. Imagine the chaos if sensitive files end up in the wrong hands — absolutely devastating! 😱
Think of it like a café that hangs a new menu outside without checking who put it there — one sneaky change can lead patrons to a dish they absolutely don’t want! 🍽️ The vulnerability exists because the application does not validate or secure the static HTML files, allowing an attacker to inject harmful content that runs when the app launches.
This could allow an attacker to load malicious content on startup, leading to unauthorized data access or even sensitive information exposure. Imagine the chaos if sensitive files end up in the wrong hands — absolutely devastating! 😱 To safeguard your systems, update to Foxit PDF and Editor version 13.2 or 2025.2 to patch this vulnerability. Additionally, review your security settings to ensure that static file access is tightly controlled. 🛡️ You've got this! Follow these steps and keep your documents safe and sound. 💪✨
| Product | Versions | Fixed in |
|---|---|---|
| foxit/pdf_editor | ≤ 13.1.7.63027 | — |
| foxit/pdf_editor | ≥ 2023.1.0.55583, ≤ 2023.3.0.63083 | — |
| foxit/pdf_editor | ≥ 2024.1.0.63682, ≤ 2024.4.1.66479 | — |
| foxit/pdf_editor | all versions | — |
| foxit/pdf_reader | ≤ 2025.1.0.66692 | — |
| foxit/pdf_editor | ≤ 13.1.7.23637 | — |
| foxit/pdf_editor | ≥ 2023.1.0.15510, ≤ 2023.3.0.23028 | — |
| foxit/pdf_editor | ≥ 2024.1.0.23997, ≤ 2024.4.1.27687 | — |
| foxit/pdf_editor | all versions | — |
| foxit/pdf_reader | ≤ 2025.1.0.27937 | — |