CVE-2020-14425

High · 7.8

CVSS

7.8

EPSS

31.3%

Published

Nov 2, 2020

CISA due date

—

The record

Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the security dialog.

Affected packages

Ecosystem	Package	Introduced	Fixed