Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8r7r-hrcf-cgvw

Опубликовано: 27 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.

A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.

EPSS

Процентиль: 15%
0.00241
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-611

Связанные уязвимости

CVSS3: 6.3
ubuntu
8 месяцев назад

A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.

CVSS3: 6.3
redhat
8 месяцев назад

A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.

CVSS3: 6.3
nvd
8 месяцев назад

A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.

CVSS3: 6.3
debian
8 месяцев назад

A local file disclosure vulnerability in the XInclude processing compo ...

CVSS3: 6.3
altlinux
больше 3 лет назад

ALT-PU-2023-8966: package `inkscape` update to version 1.3-alt1

EPSS

Процентиль: 15%
0.00241
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-611