Lucene search
Veracode Vulnerability DatabaseVERACODE:39894HistoryMar 22, 2023 - 12:44 a.m.
Server-side Request Forgery (SSRF)
2023-03-2200:44:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
23
server-side request forgery
denial of service
external host resources
parsing
application crash
EPSS
0.001
Percentile
38.6%
cairosvg is vulnerable to Server-side Request Forgery (SSRF) and Denial of Service (DOS). The vulnerability is due to allowing the loading of external host resources by default during parsing, allowing an attacker to parse a maliciously crafted file from an external resource, resulting in Server-side Request Forgery and possibly cause an application crash.
Related
osv
osv
CairoSVG improperly processes SVG files loaded from external resources
2023-03-20 21:27:15
cairosvg - security update
2023-04-05 00:00:00
PYSEC-2023-9
2023-03-20 16:15:00
fedora
fedora
[SECURITY] Fedora 37 Update: python-cairosvg-2.7.0-1.fc37
2023-03-23 01:34:53
[SECURITY] Fedora 36 Update: python-cairosvg-2.7.0-1.fc36
2023-03-30 01:16:04
[SECURITY] Fedora 38 Update: python-cairosvg-2.7.0-1.fc38
2023-03-30 00:22:58
prion
prion
Server side request forgery (ssrf)
2023-03-20 16:15:00
openvas
openvas
Debian: Security Advisory (DSA-5382-1)
2023-04-06 00:00:00
Mageia: Security Advisory (MGASA-2023-0126)
2023-04-07 00:00:00
Fedora: Security Advisory for python-cairosvg (FEDORA-2023-ab86bdbce6)
2023-03-23 00:00:00
debian
debian
[SECURITY] [DSA 5382-1] cairosvg security update
2023-04-05 20:17:44
github
github
CairoSVG improperly processes SVG files loaded from external resources
2023-03-20 21:27:15
cve
cve
CVE-2023-27586
2023-03-20 16:15:13
nessus
nessus
Fedora 37 : python-cairosvg (2023-ab86bdbce6)
2023-03-23 00:00:00
Fedora 38 : python-cairosvg (2023-e4a4ea43d8)
2023-03-30 00:00:00
Debian DSA-5382-1 : cairosvg - security update
2023-04-06 00:00:00
debiancve
debiancve
CVE-2023-27586
2023-03-20 16:15:13
ubuntucve
ubuntucve
CVE-2023-27586
2023-03-20 00:00:00
nvd
nvd
CVE-2023-27586
2023-03-20 16:15:13
alpinelinux
alpinelinux
CVE-2023-27586
2023-03-20 16:15:13
redos
redos
ROS-20230411-01
2023-04-11 00:00:00
cvelist
cvelist
mageia
mageia
Updated python-cairosvg packages fix security vulnerability
2023-04-07 00:20:12
gitlab
gitlab
CairoSVG improperly processes SVG files loaded from external resources
2023-03-20 00:00:00