Podofo · Podofo · CVE-2020-18972
**Name of the Vulnerable Software and Affected Versions**
PoDoFo version 0.9.6
**Description**
The issue is related to the exposure of sensitive information to unauthorized actors. It involves the `IsNextToken` function in the `src/base/PdfToenizer.cpp` component, which can be exploited by attackers to obtain sensitive information. The vulnerability is associated with the disclosure of information in an error data area, allowing a remote attacker to access confidential data.
**Recommendations**
For PoDoFo version 0.9.6, consider restricting access to the `IsNextToken` function in the `src/base/PdfToenizer.cpp` component as a temporary workaround until a patch is available.