Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Tao

#46050of 53,625
5.5Total CVSS
Vulnerabilities · 1
PT-2019-6172
5.5
2019-04-04
Podofo · Podofo · CVE-2020-18972
**Name of the Vulnerable Software and Affected Versions** PoDoFo version 0.9.6 **Description** The issue is related to the exposure of sensitive information to unauthorized actors. It involves the `IsNextToken` function in the `src/base/PdfToenizer.cpp` component, which can be exploited by attackers to obtain sensitive information. The vulnerability is associated with the disclosure of information in an error data area, allowing a remote attacker to access confidential data. **Recommendations** For PoDoFo version 0.9.6, consider restricting access to the `IsNextToken` function in the `src/base/PdfToenizer.cpp` component as a temporary workaround until a patch is available.