7.7Hoch

CVE-2026-119431Server-Side Request Forgery in Foxit Workspace File Upload

Foxit Software Inc. Foxit Workspace Veröffentlicht: (vor 8 Tagen)

Beschreibung

A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their contents, potentially resulting in sensitive information disclosure and unauthorized access to internal services.

Schwachstellentyp (CWE): CWE-918

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Foxit Software Inc. Foxit Workspace before 2026-11-6

Referenzen und Patches