Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-38633 PoC — librsvg 路径遍历漏洞

Source
https://github.com/vulhub/vulhub/blob/master/librsvg/CVE-2023-38633/README.md
Associated Vulnerability
Title:librsvg 路径遍历漏洞 (CVE-2023-38633)
Description:librsvg是GNOME项目的将 SVG 图像渲染到 Cairo 表面的库。GNOME 使用它来呈现 SVG 图标。在 GNOME 之外，其他桌面环境也将其用于类似目的。维基媒体将其用于维基百科的 SVG 图表。 librsvg 2.56.3之前版本存在安全漏洞，该漏洞源于URL解码器中存在目录遍历问题，攻击者可能会利用该漏洞泄露文件。
File Snapshot

 # Librsvg XInclude Arbitrary file reading (CVE-2023-38633)

[中文版本(Chinese version)](README.zh-cn.md)

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.