CVE-2022-43310

EPSS 0.01%
Veröffentlicht 09.11.2022 21:15:17
Zuletzt bearbeitet 01.05.2025 16:15:24
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Foxitsoftware ≫ Foxit Reader Version < 11.2.118.51569

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.01%	0.012

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

https://www.foxitsoftware.com/support/security-bulletins.php

Vendor Advisory

Not Applicable

https://github.com/hxxt9049/futing

Third Party Advisory

https://www.foxitsoftware.cn/support/security-bulletins.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-43310

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-43310

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-43310

EUVD