PDF injection vulnerability

thebirdmanloves · October 8, 2021, 3:23pm

Hi,

I was asked a security question around use of aspose cloud to generate PDFs, and whether the API will check for injection attacks.

Does the aspose cloud pdf api prevent such attacks, or is more work required in my own software to mitigate against them.

Thanks,

Dan.

tilal.ahmad · October 8, 2021, 4:29pm

@thebirdmanloves

We are investigating(PDFCLOUD-2363) your raised question and will share our findings with you asap.

tilal.ahmad · October 12, 2021, 2:26pm

@thebirdmanloves

Please note we have already solved the possibility of such injection in PDF documents. So Aspose.PDF Cloud is safe to XXE and XSS injection vulnerability.

thebirdmanloves · October 12, 2021, 4:13pm

Great thanks for coming back so quickly @tilal.ahmad!