When URL parsers disagree (CVE-2023-38633)

www.canva.dev When URL parsers disagree (CVE-2023-38633) - Canva Engineering Blog

Discovery and walkthrough of CVE-2023-38633 in librsvg, when two URL parser implementations (Rust and Glib) disagree on file scheme parsing leading to path traversal.

Rust @programming.dev snaggen @programming.dev 12mo ago

www.canva.dev /blog/engineering/when-url-parsers-disagree-cve-2023-38633/

27 3

Hacker News @lemmy.smeargle.fans bot @lemmy.smeargle.fans

BOT

12mo ago

When URL parsers disagree (CVE-2023-38633, librsvg)

www.canva.dev /blog/engineering/when-url-parsers-disagree-cve-2023-38633/

2 0

Hacker News @derp.foo haxor @derp.foo

BOT

12mo ago

When URL parsers disagree (CVE-2023-38633, librsvg)

www.canva.dev /blog/engineering/when-url-parsers-disagree-cve-2023-38633/

2 0

0 comments