CVE-2023-46035 in svg_optimizer Geminfo

Prediction

by VulDB Data Team • 10/20/2023

A security flaw has been discovered in svg_optimizer Gem 0.2.6 on Ruby. Affected is the function svg_optimizer. The manipulation results in xml external entity reference. The attack can only be performed from the local network. Upgrading to version 0.3.0 is able to address this issue. Upgrading the affected component is recommended.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservation

10/16/2023

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

very low

Sector

Telecommunication

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2023-46035
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2023-46035
CVE Detailshttps://www.cvedetails.com/cve/CVE-2023-46035/

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!