CVE-2020-35340

A local file inclusion vulnerability in ExpertPDF 9.5.0 through 14.1.0 allows attackers to read the file contents from files that the running ExpertPDF process has access to read.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2021-09-15

Last modified

2024-08-04

Weaknesses

CWE-552

Affected products

• Expertpdf (Expertpdf)

References

• https://optionalctf.com/cve-2020-35340-local-file-inclusion-in-expertpdf-9-5-0-14-1-0/