spookhorror

Hello everyone,

I have discovered a Denial of Service (DoS) issue in MuPDF v1.21.1. Additionally, CVE-2023-31794 has been assigned to this issue.

Impact:
DoS

Description:

MuPDF v1.21.1 has been found to contain a vulnerability that allows for infinite recursion in the component pdf_mark_list_push. This vulnerability enables attackers to trigger a Denial of Service (DoS) by using a crafted PDF file.

spookhorror

Hello everyone,

I have discovered an XXE issue in openCRX v5.2.2, and it has been assigned CVE-2023-46502.

Description:
In openCRX v5.2.2, an insecure DocumentBuilderFactory is utilized for parsing user requests, which enables attackers to read internal files and execute server side request forgery attack.

Impact:
SSRF and local file inclusion.