Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-38633 PoC — librsvg 路径遍历漏洞

Source
https://github.com/Threekiii/Awesome-POC/blob/master/%E5%85%B6%E4%BB%96%E6%BC%8F%E6%B4%9E/librsvg%20XInclude%20%E6%96%87%E4%BB%B6%E5%8C%85%E5%90%AB%E6%BC%8F%E6%B4%9E%20CVE-2023-38633.md
Associated Vulnerability
Title:librsvg 路径遍历漏洞 (CVE-2023-38633)
Description:librsvg是GNOME项目的将 SVG 图像渲染到 Cairo 表面的库。GNOME 使用它来呈现 SVG 图标。在 GNOME 之外，其他桌面环境也将其用于类似目的。维基媒体将其用于维基百科的 SVG 图表。 librsvg 2.56.3之前版本存在安全漏洞，该漏洞源于URL解码器中存在目录遍历问题，攻击者可能会利用该漏洞泄露文件。
File Snapshot

 # librsvg XInclude 文件包含漏洞 CVE-2023-38633

## 漏洞描述

librsvg是一个用于处理SVG图片的开源依赖库。

librsvg支持XML中的XInclud

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.