Cnblogs Pdfpatcher
2 CVEs affecting Cnblogs Pdfpatcher. Latest disclosed: 2025-11-17. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-63917 | High | 7.1 | 2025-11-17 | PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. The application uses .NET's X… |
CVE-2025-63918 | Medium | 6.2 | 2025-11-17 | PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrar… |