Описание
A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.
Ссылки
- Issue TrackingPatch
- ExploitIssue Tracking
Уязвимые конфигурации
EPSS
6.3 Medium
CVSS3
Дефекты
Связанные уязвимости
A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.
A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.
A local file disclosure vulnerability in the XInclude processing compo ...
A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.
ALT-PU-2023-8966: package `inkscape` update to version 1.3-alt1
EPSS
6.3 Medium
CVSS3