CVE-2023-6298 is a medium-severity vulnerability affecting Apryse iText 8.0.2, specifically within the PdfDocument.java file's main function, leading to improper validation of array indexes. This flaw can be triggered remotely with low attack complexity, potentially causing a denial of service (availability impact) without requiring user interaction. While public exploit details exist, the vendor disputes its classification as a vulnerability, stating that the reported exception is not a security concern. There is currently no evidence of active exploitation, and it has received minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
8.0.2CPE matchmatch criteria | cpe:2.3:a:itextpdf:itext:8.0.2:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.