7.7Yüksek

CVE-2026-119431Server-Side Request Forgery in Foxit Workspace File Upload

Foxit Software Inc. Foxit Workspace Yayım: (8 gün önce)

Açıklama

A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their contents, potentially resulting in sensitive information disclosure and unauthorized access to internal services.

Zayıflık türü (CWE): CWE-918

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Foxit Software Inc. Foxit Workspace before 2026-11-6

Kaynaklar ve yamalar