An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://github.com/paokuwansui/wps_exp/blob/main/README | third party advisory |