GitHub Advisoryadvisory · PyPI

GHSA-9q9m-c65c-37pq Reportlab vulnerable to remote code execution

HIGH Published 2023-06-05 Modified 2025-01-08 Official page ↗
Aliases
CVE-2023-33733
Ecosystem
PyPI
Packages
reportlab
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-94
Reviewed
2023-08-28

Affected packages

• PyPI reportlab: < 3.6.13 → fixed in 3.6.13

Description

Reportlab up to and including v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

Related

Alias · CVE (1)

  • CVE-2023-33733 Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file. vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References