Описание
Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation on the JPEG output of a scanner. Reportedly, this can have a security risk if debug.log is later edited and then executed.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 13.2 (исключая)
cpe:2.3:a:gonitro:nitro_pro:*:*:*:*:*:*:*:*
EPSS
Процентиль: 0%
0.00005
Низкий
7.8 High
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-732
Связанные уязвимости
github
больше 3 лет назад
Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation on the JPEG output of a scanner. Reportedly, this can have a security risk if debug.log is later edited and then executed.
EPSS
Процентиль: 0%
0.00005
Низкий
7.8 High
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-732