Vulnerability Database
296,748
Total vulnerabilities in the database
CVE-2025-11058
Impact
When generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the XML.
Workarounds
Test untrusted input with link elements with rel="attachment" before processing.
Credits
This vulnerability was reported by Mohamed Ouad from Doyensec.
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime