CVE-2020-14425

Publication date

2020-11-02 17:01:34

Family

mitre

State

PUBLISHED

Description

Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the security dialog.