Server-Side Request Forgery in Foxit Workspace File Upload

Summary

A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their contents, potentially resulting in sensitive information disclosure and unauthorized access to internal services.

Remediation

1. Inventory every Foxit Software Inc. Foxit Workspace deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://www.foxit.com/support/security-bulletins.html