PDF Signer 3.0 - SSTI to RCE via CSRF Cookie Vulnerability

PDF Signer version 3.0 was affected by Server-Side Template Injection leading to Remote Command Execution due to improper Cookie handling and improper CSRF implementation.

Impact

A remote attacker can use this vulnerability to execute arbitrary commands.

Mitigation / Precaution

In order to patch this vulnerability, we recommend you to update PDF Signer to the latest version.

Written by

Anandhu K A

Lead Engineer

With a profound understanding of product development, Anandhu plays a pivotal role in crafting cutting-edge solutions that cater to the evolving security needs of digital applications. His expertise, deeply rooted in both engineering and security, makes him an essential component of Beagle Security's mission