When URL parsers disagree (CVE-2023-38633, librsvg)
When URL parsers disagree (CVE-2023-38633, librsvg)
www.canva.dev When URL parsers disagree (CVE-2023-38633) - Canva Engineering Blog
Discovery and walkthrough of CVE-2023-38633 in librsvg, when two URL parser implementations (Rust and Glib) disagree on file scheme parsing leading to path traversal.
![When URL parsers disagree (CVE-2023-38633) - Canva Engineering Blog](https://lemmy.world/pictrs/image/87f02687-ea9f-46a1-9956-ac2ff5bcfd05.png?format=webp&thumbnail=256)
There is a discussion on Hacker News, but feel free to comment here as well.
0 comments