CVE-2021-39307

MEDIO 6.1CVE-2021-39307 · Published 15/09/2021 · updated 17/06/2026

In breve

CVE-2021-39307 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda webviewer ui (pdftron).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 66.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
webviewer ui pdftron	`≤ 8.0`	No fix yet

Description

PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including JavaScript URLs, allowing the execution of arbitrary JavaScript code.

References

research.nccgroup.com/2021/09/14/technical-advisory-pdftron-javascript-urls-allowed-in-webviewer-ui-cve-2021-39307 · Exploit
pdftron.com/webviewer · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free