8.7Yüksek

CVE-2026-119432Foxit Workspace Stored XSS in shared artifacts

Foxit Software Inc. Foxit Workspace Yayım: (8 gün önce)

Açıklama

A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker could upload a crafted file and share it with a victim. When the victim opens or previews the file, the embedded script executes in the application's origin, potentially accessing locally stored credentials and enabling credential theft.

Zayıflık türü (CWE): CWE-79

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Foxit Software Inc. Foxit Workspace before 2026-11-6

Kaynaklar ve yamalar