CVE-2025-63918

MediumCVSS 6.2

Published: 17/11/2025(UTC)Updated: 05/11/2026(UTC)Translated: 05/11/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

37th percentile - higher than 37% of all known CVEs

Summary

The PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks that let attackers upload arbitrary files to arbitrary locations.

Risk Assessment

An attacker could write malicious files to critical system locations, potentially leading to code execution or data integrity compromise.

Recommendation

Update PDFPatcher to a patched version or restrict application permissions and validate file paths before writing.

Other vulnerabilities in PDFPatcher

CVE-2025-63917High
PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to read arbitrary files, exfiltrate sensitive data via out-of-band (OOB) HTTP requests, perform SSRF attacks against internal network resources, or cause a denial of service via entity expansion attacks.

Original NVD description (English source)

PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS