CVE-2022-30350

Published Mar 30, 2023

Updated

Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure. The PDFEscape Online tool provides users with a "white out" functionality for redacting images, text, and other graphics from a PDF document. However, this mechanism does not remove underlying text or PDF object specification information from the PDF. As a result, for example, redacted text may be copy-pasted by a PDF reader.

Affected Software

1 affected component

avanquest PDFEscape=3.19.2.2

Event History

Mar 30, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2022-30350.

What is the severity of CVE-2022-30350?

The severity of CVE-2022-30350 is high with a score of 7.5.

What is the affected software version of CVE-2022-30350?

The affected software version of CVE-2022-30350 is Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2.

What is the vulnerability description of CVE-2022-30350?

CVE-2022-30350 is an information leak/disclosure vulnerability in Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2. The "white out" functionality in PDFEscape Online does not remove underlying text, leading to potential information disclosure.

How do I fix CVE-2022-30350?

As a user, make sure to update Avanquest Software RAD PDF (PDFEscape Online) to a secure version once a fix is available.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.