Beveiligingsadvies

CVE-2023-38633

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-07-22 00:00:00

Laatst bijgewerkt 2024-08-02 17:46:56

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

← Alle CVE's bekijken Bekijk op cve.org ↗