When URL parsers disagree (CVE-2023-38633)

www.canva.dev

When URL parsers disagree (CVE-2023-38633)

www.canva.dev

repostbot33@lemmy.worldBBanned from community to

netsec@lemmy.worldEnglish · 3 years ago

When URL parsers disagree (CVE-2023-38633) - Canva Engineering Blog

www.canva.dev

Discovery and walkthrough of CVE-2023-38633 in librsvg, when two URL parser implementations (Rust and Glib) disagree on file scheme parsing leading to path traversal.

You must log in or # to comment.

Chat

netsec@lemmy.world

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !netsec@lemmy.world

Technical news and discussion of information security.

Rules:

Be excellent to each other
Keep it on topic
Absolutely no PII or doxing
No disclosure posts

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

3 users / day
1 user / week
14 users / month
25 users / 6 months
14 local subscribers
1.46K subscribers
1.16K Posts
129 Comments
Modlog

mods:
t8r@lemmy.world