CVE-2022-43310

EPSS 0.01%
Published 09.11.2022 21:15:17
Last modified 01.05.2025 16:15:24
Source cve@mitre.org
Teams watchlist Login
Open Login

An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Foxitsoftware ≫ Foxit Reader Version < 11.2.118.51569

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.01%	0.012

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

https://www.foxitsoftware.com/support/security-bulletins.php

Vendor Advisory

Not Applicable

https://github.com/hxxt9049/futing

Third Party Advisory

https://www.foxitsoftware.cn/support/security-bulletins.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-43310

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-43310

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-43310

EUVD