← Database

CVE-2021-38572

CRITICAL CVSS: 9.8 Published: 2021-08-11 Modified: 2026-06-17

Description

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated.

Affected Platforms

Foxitsoftware PhantompdfFoxitsoftware Foxit Reader

Weakness Type

NVD-CWE-noinfo

References