CVE-2021-38570

No fix known EPSS 1%

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during uninstallation) via a symlink.

Published 2021-08-11 · CVE record · OSV

Products: foxitsoftware foxit_reader, foxitsoftware phantompdf