gdcm-security-poc

Hallazgos de GDCM 1-6: paquete de reproducción Seis defectos de parser/codec en GDCM, reproducidos en v3.2.6 como fallos de sanitizer o comprobaciones de propagación acotadas. Cada disparador automatizado tiene un control casi válido que no produce la señal vulnerable. El hallazgo 1 también inclu...

Improper Output Handling

Apache Log4j Core is vulnerable to Improper Output Handling. The vulnerability is due to XmlLayout failing to sanitize characters forbidden by the XML 1.0 specification, allowing log messages or MDC values to produce malformed XML or trigger exceptions during logging, which can lead to dropped or...

CVE-2022-34473

The HTML Sanitizer should have sanitized the href attribute of SVG use tags; however it incorrectly did not sanitize xlink:href attributes. This vulnerability affects Firefox 102...