CVE-2023-50252CWE-15CWE-502

php-svg-lib unsafe attributes merge when parsing `use` tag

High · published December 12, 2023

CVSS v3.1

8.3

EPSS

24%

Percentile

97.8

In the wild

Unconfirmed

What it is

php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling `<use>` tag that references an `<image>` tag, it merges the attributes from the `<use>` tag to the `<image>` tag. The problem pops up especially when the `href` attribute from the `<use>` tag has not been sanitized. This can lead to an unsafe file read that can cause PHAR Deserialization vulnerability in PHP prior to version 8. Version 0.5.1 contains a patch for this issue.

The record

Technical detail

CVSS v3.1: 8.3 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0: Not supplied
EPSS: 0.23903 · 97.8th percentile
Weaknesses: CWE-15 · External Control of System or Configuration Setting; CWE-502 · Deserialization of Untrusted Data
Published: 2023-12-12T20:39Z

EPSS history

Timeline

12 DEC 20:39Z
php-svg-lib unsafe attributes merge when parsing `use` tag
cvelistv5