CVE-2023-38633

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem…

published July 22, 2023

CVSS
—
EPSS
2%
Percentile
83.4
In the wild
Unconfirmed
What it is

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02325 · 83.4th percentile
Published
2023-07-22T00:00Z
EPSS history
Timeline
  • 22 JUL 00:00Z
    A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem…
    cvelistv5