Lucene search
K

K000132775: DOMPDF vulnerabilities CVE-2023-23924 and CVE-2023-24813

🗓️ 27 Feb 2023 19:43:40Reported by f5Type 
f5
 f5
🔗 my.f5.com👁 26 Views

DOMPDF vulnerabilities CVE-2023-23924 and CVE-2023-24813. URI validation bypassed, arbitrary URL & protocol calls, potential remote code execution

Related
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for Incorrect Behavior Order: Authorization Before Parsing and Canonicalization in Dompdf_Project Dompdf
1 Feb 202318:21
githubexploit
Circl
CVE-2023-23924
31 Jan 202313:33
circl
Circl
CVE-2023-24813
7 Feb 202322:23
circl
CNNVD
Dompdf 安全漏洞
1 Feb 202300:00
cnnvd
CNNVD
Dompdf 安全漏洞
7 Feb 202300:00
cnnvd
CVE
CVE-2023-23924
31 Jan 202323:54
cve
CVE
CVE-2023-24813
7 Feb 202318:05
cve
Cvelist
CVE-2023-23924 URI validation failure on SVG parsing in Dompdf
31 Jan 202323:54
cvelist
Cvelist
CVE-2023-24813 URI validation failure on SVG parsing. Bypass of CVE-2023-23924
7 Feb 202318:05
cvelist
Debian CVE
CVE-2023-23924
31 Jan 202323:54
debiancve
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 Feb 2023 19:45Current
9.2High risk
Vulners AI Score9.2
CVSS 3.19.8 - 10
EPSS0.51462
SSVC
26