CVEvulnerability

CVE-2024-25858

8.4 HIGH Published 2024-03-05 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-03-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-450

Description

In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an unoptimized prompt message for users to review parameters of commands.

Affected configurations

• foxit pdf editor (< 2024.4) • foxit pdf reader (< 2024.4)

Related

Weakness · CWE (1)

  • CWE-450 Multiple Interpretations of UI Input weakness

References