Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2023/10/20 1:23 p.m.•34 views

svg_optimizer rubygem external XML entity (XXE) vulnerability

An issue in Fnando svgoptimizer v.0.2.6 allows a remote attacker to escalate privileges when optimizing untrusted SVG content...

5.9CVSS6.9AI score0.00364EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2023/10/20 1:23 p.m.•36 views

GHSA-6HVG-62Q8-95V7 svg_optimizer rubygem external XML entity (XXE) vulnerability

An issue in Fnando svgoptimizer v.0.2.6 allows a remote attacker to escalate privileges when optimizing untrusted SVG content...

5.9CVSS6.7AI score0.00364EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/10/20 12:00 a.m.•12 views

PT-2023-29810

Name of the Vulnerable Software and Affected Versions Fnando svg optimizer version 0.2.6 Description The issue allows a remote attacker to escalate privileges when optimizing untrusted SVG content. Recommendations For Fnando svg optimizer version 0.2.6, update to a version that fixes the privileg...

5.9CVSS5.9AI score0.00364EPSS
SaveExploits0References8
Rows per page
Query Builder