An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated.Referenceshttps://www.foxitsoftware.com/support/security-bulletins.php
