CVE-2020-14425

No fix known EPSS 31%

Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the security dialog.

Published 2020-11-02 · CVE record · OSV

Products: foxitsoftware foxit_reader