VYPR

Pdfpatcher

by Cnblogs

CVEs (1)

  • CVE-2025-63917HigNov 17, 2025
    risk 0.46cvss 7.1epss 0.00

    PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary files from the…