1 matches found
MGASA-2023-0259 Updated librsvg packages fix security vulnerability
A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files on the local filesystem outside of the expected area, as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element. CVE-2023-3863...
5.5CVSS5.3AI score0.02381EPSS
SaveExploits1References6
20