Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CairoSVG improperly processes SVG files loaded from external resources
Vulnerability Description
CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-side request forgery or denial of service. Version 2.7.0 disables CairoSVG's ability to access other files online by default.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L
Vulnerability Type
输入验证不恰当
Vulnerability Title
Kozea CairoSVG 代码问题漏洞
Vulnerability Description
Kozea CairoSVG是Kozea社区的一个基于Python可将SVG文件转换为为PDF，EPS，PS和PNG文件的软件。 Kozea CairoSVG 2.7.0之前版本存在代码问题漏洞，该漏洞源于Cairo 在处理 SVG 文件时可以向外部主机发送请求。攻击者可以利用该漏洞发送特制的 SVG 文件，执行服务器端请求伪造或拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A