CVE-2020-6093: Gonitro Nitro Pro

Medium severity, CVSS 5.5. EPSS: 2.7% chance of exploitation in the next 30 days.

An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling. A specially crafted PDF document can cause uninitialized memory access resulting in information disclosure. In order to trigger this vulnerability, victim must open a malicious file.

Affected products

• Gonitro Nitro Pro: version 13.9.1.155 only

Published 2020-05-18. Last modified 2026-06-17.