CVE-2023-46035

Medium

The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents.

mitre·CWE-611·Published 2023-10-20

CVSS

5.9

EPSS

0.00

KEV

Exploits

cve.orgen

93 chars

The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents.

NVDen

93 chars

The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents.

OSV.deven

127 chars

An issue in Fnando svg_optimizer v.0.2.6 allows a remote attacker to escalate privileges when optimizing untrusted SVG content.

GHSAen

127 chars

An issue in Fnando svg_optimizer v.0.2.6 allows a remote attacker to escalate privileges when optimizing untrusted SVG content.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.9	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
3.1	Secondary	NVD	5.9	2.2	3.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N