HTTP: Nitro Pro PDF Reader Javascript API Remote Code Execution
This signature detects attempts to exploit a known vulnerability against Nitro Pro. A successful attack can lead to arbitrary code execution.
Extended Description
Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.
Affected Products
Gonitro nitro_pro
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Gonitro
6.8