CVE-2023-38633

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

CVSS v3.0 5.5 MEDIUM

5.5^/10

CVSS v3.0 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://gitlab.gnome.org/GNOME/librsvg/-/releases/2.56.3	Release Notes
https://bugzilla.suse.com/show_bug.cgi?id=1213502	Issue Tracking Patch Third Party Advisory
https://gitlab.gnome.org/GNOME/librsvg/-/issues/996	Exploit Issue Tracking Vendor Advisory
http://www.openwall.com/lists/oss-security/2023/07/27/1	Exploit Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2023/Jul/43	Mailing List Not Applicable Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R5BCXT5GW6RCL45ZUHUZR4CJG2BAFDVC/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/422NTIHIEBRASIG2DWXYBH4ADYMHY626/

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:gnome:librsvg::::::::
	cpe:2.3:a:gnome:librsvg::::::::
	cpe:2.3:a:gnome:librsvg::::::::
	cpe:2.3:a:gnome:librsvg::::::::
	cpe:2.3:a:gnome:librsvg::::::::
	cpe:2.3:a:gnome:librsvg::::::::
	cpe:2.3:a:gnome:librsvg::::::::

Configuration 2 (hide)

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

Information

Published : 2023-07-22 17:15

Updated : 2023-08-17 19:15

NVD link : CVE-2023-38633

Mitre link : CVE-2023-38633

JSON object : View

Products Affected

fedoraproject

fedora

gnome

librsvg

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://gitlab.gnome.org/GNOME/librsvg/-/releases/2.56.3", "name": "https://gitlab.gnome.org/GNOME/librsvg/-/releases/2.56.3", "tags": ["Release Notes"], "refsource": "CONFIRM"}, {"url": "https://bugzilla.suse.com/show_bug.cgi?id=1213502", "name": "https://bugzilla.suse.com/show_bug.cgi?id=1213502", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "refsource": "MISC"}, {"url": "https://gitlab.gnome.org/GNOME/librsvg/-/issues/996", "name": "https://gitlab.gnome.org/GNOME/librsvg/-/issues/996", "tags": ["Exploit", "Issue Tracking", "Vendor Advisory"], "refsource": "MISC"}, {"url": "http://www.openwall.com/lists/oss-security/2023/07/27/1", "name": "[oss-security] 20230727 CVE-2023-38633 in librsvg: Arbitrary file read when xinclude href has special characters", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "refsource": "MLIST"}, {"url": "http://seclists.org/fulldisclosure/2023/Jul/43", "name": "20230724 APPLE-SA-2023-07-24-1 Safari 16.6", "tags": ["Mailing List", "Not Applicable", "Third Party Advisory"], "refsource": "FULLDISC"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R5BCXT5GW6RCL45ZUHUZR4CJG2BAFDVC/", "name": "FEDORA-2023-fc79ee273d", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "FEDORA"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/422NTIHIEBRASIG2DWXYBH4ADYMHY626/", "name": "FEDORA-2023-0873c38acd", "tags": [], "refsource": "FEDORA"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=\".?../../../../../../../../../../etc/passwd\" in an xi:include element."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-22"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2023-38633", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}}, "publishedDate": "2023-07-22T17:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:gnome:librsvg:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2.46.6"}, {"cpe23Uri": "cpe:2.3:a:gnome:librsvg:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2.48.11", "versionStartIncluding": "2.48.0"}, {"cpe23Uri": "cpe:2.3:a:gnome:librsvg:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2.50.8", "versionStartIncluding": "2.50.0"}, {"cpe23Uri": "cpe:2.3:a:gnome:librsvg:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2.52.10", "versionStartIncluding": "2.52.0"}, {"cpe23Uri": "cpe:2.3:a:gnome:librsvg:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2.54.6", "versionStartIncluding": "2.54.0"}, {"cpe23Uri": "cpe:2.3:a:gnome:librsvg:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2.55.3", "versionStartIncluding": "2.55.0"}, {"cpe23Uri": "cpe:2.3:a:gnome:librsvg:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2.56.3", "versionStartIncluding": "2.56.0"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2023-08-17T19:15Z"}