References https://www.tenablecloud.cn/plugins/nessus/139924 https://www.nsfocus.net/vulndb/52963 https://www.foxit.com/support/security-bulletins.html https://www.cnvd.org.cn/patchInfo/show/159439 https://idocdown.com/app/articles/blogs/detail/6452 https://www.fortiguard.com/encyclopedia/ips/48869 https://www.zerodayinitiative.com/advisories/ZDI-20-1079/ https://www.keysight.com/us/en/strikes/exploits/clientside/cve_2020_8878_foxit_studio_photo_oob_write.xml https://nvd.nist.gov/vuln/detail/CVE-2020-17403 https://cvepremium.circl.lu/vuln/cve-2020-17403
Related VulnerabilitiesPoCCVE-2022-1281: Photo Gallery WordPress v1.6.3 - SQL Injection时空智友ERP系统 /formservice updater.uploadStudioFile 文件上传漏洞PoCCVE-2025-25296: Label Studio < 1.16.0 - Cross-Site ScriptingPoCCVE-2025-47783: Label Studio < 1.18.0 - Reflected XSSLabel Studio存在XSS漏洞(CVE-2025-25296)PoCCVE-2025-14726: WordPress Widgets for Social Photo Feed <= 1.8 - Information DisclosurePoCsupabase-studio-exposure: Supabase Studio - ExposurePoCphotoprism-unauth-exposure: PhotoPrism - Unauthenticated ExposurePoCCVE-2024-14015: Studiocart <= 2.9.0 - Cross-Site ScriptingPoCCVE-2021-24139: 10Web Photo Gallery < 1.5.55 - SQL InjectionPoCvscode-settings: Visual Studio Code Settings - Credential ExposurePoCvscode-mcp-json: Visual Studio Code MCP Configuration ("mcp.json") ExposurePoCCVE-2022-0873: WordPress Gmedia Photo Gallery Plugin < 1.20.0 - Cross-Site Scripting