Apache Pdfbox Examples
Monthly
Path traversal vulnerability in Apache PDFBox Examples ExtractEmbeddedFiles tool allows authenticated local users to write files outside intended directories via malicious PDF files when the initial path traversal fix fails to properly validate file path separators. Affects PDFBox 2.0.24-2.0.36 and 3.0.0-3.0.7; CVSS 4.3 with low exploitability (EPSS 0.02%, SSVC automation: no). Patch versions 2.0.37 and 3.0.8 address the issue.
Path traversal vulnerability in Apache PDFBox Examples ExtractEmbeddedFiles tool allows authenticated local users to write files outside intended directories via malicious PDF files when the initial path traversal fix fails to properly validate file path separators. Affects PDFBox 2.0.24-2.0.36 and 3.0.0-3.0.7; CVSS 4.3 with low exploitability (EPSS 0.02%, SSVC automation: no). Patch versions 2.0.37 and 3.0.8 address the issue.