Foxit.com - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/foxit.com/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 11:14:15 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgFoxit: Sensitive information exposure via exposed credentials in JavaScript (CVE-2026-111419)https://feed.craftedsignal.io/briefs/2026-10-foxit-info-exposure/Thu, 29 Oct 2026 11:14:15 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-foxit-info-exposure/The Foxit official website exposes third-party authorization credentials within its client-side JavaScript code, allowing unauthorized parties to potentially harvest and misuse sensitive information.Foxit's official website has been identified as containing hardcoded third-party authorization credentials within its client-side JavaScript files. By inspecting the publicly accessible scripts, unauthorized actors can extract these credentials, leading to potential unauthorized access or misuse of third-party services integrated with the Foxit domain.

Impact

Unauthorized actors can obtain sensitive authorization tokens or secrets, which may allow for unauthorized access to third-party services linked to the Foxit infrastructure.

Recommendation

  • Review all client-side JavaScript files on corporate-controlled websites for embedded secrets or credentials.
  • Implement a secret scanning solution for web repositories to prevent the accidental exposure of sensitive keys.
  • Rotate all third-party credentials identified within the affected JavaScript files on the Foxit website immediately.
]]>highadvisoryweb-vulnerabilityinformation-exposurecredential-access