CVE-2020-6093

No fix known EPSS 3%CVSS 6.5

An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling. A specially crafted PDF document can cause uninitialized memory access resulting in information disclosure. In order to trigger this vulnerability, victim must open a malicious file.

Published 2020-05-18 · CVE record · OSV

Products: gonitro nitro_pro