admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 18:27:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-34342.md
0xMarcio bc4580b779 Update CVE sources 2024-06-07 04:52
2024-06-07 04:52:01 +00:00

999 B
Raw Permalink Blame History

CVE-2024-34342

Description

react-pdf displays PDFs in React apps. If PDF.js is used to load a malicious PDF, and PDF.js is configured with isEvalSupported set to true (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. This vulnerability is fixed in 7.7.3 and 8.0.2.

POC

Reference

No PoCs from references.

Github