This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Hello everyone, | |
I have discovered a Denial of Service (DoS) issue in MuPDF v1.21.1. Additionally, CVE-2023-31794 has been assigned to this issue. | |
Impact: | |
DoS | |
Description: | |
MuPDF v1.21.1 has been found to contain a vulnerability that allows for infinite recursion in the component pdf_mark_list_push. This vulnerability enables attackers to trigger a Denial of Service (DoS) by using a crafted PDF file. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Hello everyone, | |
I have discovered an XXE issue in openCRX v5.2.2, and it has been assigned CVE-2023-46502. | |
Description: | |
In openCRX v5.2.2, an insecure DocumentBuilderFactory is utilized for parsing user requests, which enables attackers to read internal files and execute server side request forgery attack. | |
Impact: | |
SSRF and local file inclusion. |