📦 Pdfbox

Apache PDFBox 2.0.14 has an XML External Entity (XXE) vulnerability in its XFDF parsing functionality due to improper XML parser initialization. Attackers can exploit this to read arbitrary files from...

This CVE describes a path traversal vulnerability in Apache PDFBox's ExtractEmbeddedFiles example code. Attackers can exploit this to write files outside the intended extraction directory, potentially...