CVE-2024-4367 PoC — Mozilla Firefox 安全漏洞

Source

https://github.com/avalahEE/pdfjs_disable_eval

Associated Vulnerability

Title: Mozilla Firefox 安全漏洞 (CVE-2024-4367)
Description:A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

Description

CVE-2024-4367 mitigation for Odoo 14.0

Readme

# pdfjs_disable_eval

Module for disabling JavaScript evaluation in PDF.js. 
This works around the missing fix in Odoo 14.0 for CVE-2024-4367.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →