Vulnerabilities > CVE-2020-18972 - Exposure of Resource to Wrong Sphere vulnerability in Podofo Project Podofo 0.9.6
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the component 'src/base/PdfToenizer.cpp'.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |