When URL parsers disagree (CVE-2023-38633)

www.canva.dev

cross-posted to:
rust@programming.dev
netsec@lemmy.world

When URL parsers disagree (CVE-2023-38633)

www.canva.dev

bOt@zerobytes.monsterM to Technical Information Security Content & Discussion@zerobytes.monster · 1 year ago

cross-posted to:
rust@programming.dev
netsec@lemmy.world

When URL parsers disagree (CVE-2023-38633) - Canva Engineering Blog

www.canva.dev

Discovery and walkthrough of CVE-2023-38633 in librsvg, when two URL parser implementations (Rust and Glib) disagree on file scheme parsing leading to path traversal.

This is an automated archive.

The original was posted on /r/netsec by /u/ScottContini on 2023-09-05 07:57:49+00:00.

You must log in or register to comment.

Chat