3 matches found
svg_optimizer rubygem external XML entity (XXE) vulnerability
An issue in Fnando svgoptimizer v.0.2.6 allows a remote attacker to escalate privileges when optimizing untrusted SVG content...
5.9CVSS6.9AI score0.00364EPSS
SaveExploits0References5Affected Software1
GHSA-6HVG-62Q8-95V7 svg_optimizer rubygem external XML entity (XXE) vulnerability
An issue in Fnando svgoptimizer v.0.2.6 allows a remote attacker to escalate privileges when optimizing untrusted SVG content...
5.9CVSS6.7AI score0.00364EPSS
SaveExploits0References5
PT-2023-29810
Name of the Vulnerable Software and Affected Versions Fnando svg optimizer version 0.2.6 Description The issue allows a remote attacker to escalate privileges when optimizing untrusted SVG content. Recommendations For Fnando svg optimizer version 0.2.6, update to a version that fixes the privileg...
5.9CVSS5.9AI score0.00364EPSS
SaveExploits0References8
20