Lucene search

PRIOn knowledge basePRION:CVE-2023-50252

HistoryDec 12, 2023 - 9:15 p.m.

Deserialization of untrusted data

2023-12-1221:15:00

PRIOn knowledge base

www.prio-n.com

php-svg-lib

svg parsing

rendering library

<use> tag

<image> tag

attribute merging

href attribute

unsafe file read

phar deserialization vulnerability

php

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.2%

JSON

php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling <use> tag that references an <image> tag, it merges the attributes from the <use> tag to the <image> tag. The problem pops up especially when the href attribute from the <use> tag has not been sanitized. This can lead to an unsafe file read that can cause PHAR Deserialization vulnerability in PHP prior to version 8. Version 0.5.1 contains a patch for this issue.

CPENameOperatorVersion
php-svg-liblt0.5.1

CPE	Name	Operator	Version
	php-svg-lib	lt	0.5.1

References

github.com/dompdf/php-svg-lib/commit/08ce6a96d63ad7216315fae34a61c886dd2dc030

github.com/dompdf/php-svg-lib/security/advisories/GHSA-jq98-9543-m4cr