Medium severity5.5NVD Advisory· Published Aug 25, 2021· Updated Jun 17, 2026
CVE-2020-18972
CVE-2020-18972
Description
Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the component 'src/base/PdfToenizer.cpp'.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:podofo_project:podofo:0.9.6:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:podofo_project:podofo:0.9.6:-:*:*:*:*:*:*
- (no CPE)range: =0.9.6
- PoDoFo/PoDoFodescription
Patches
Vulnerability mechanics
References
1- sourceforge.net/p/podofo/tickets/49/nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.