Apryse · Apryse Webviewer · CVE-2024-4327
**Name of the Vulnerable Software and Affected Versions**
Apryse WebViewer versions up to 10.8.0
**Description**
A vulnerability was found in the PDF Document Handler component of Apryse WebViewer, which can lead to cross site scripting. The manipulation can be initiated remotely. The vendor recommends a strict Content Security Policy to mitigate the issue.
**Recommendations**
For Apryse WebViewer versions up to 10.8.0, upgrade to version 10.9 to address this issue. As a temporary workaround, consider implementing a strict Content Security Policy to minimize the risk of exploitation.