Canva Engineering Blog company blog
When URL parsers disagree
Discovery and walkthrough of CVE-2023-38633 in librsvg, when two URL parser implementations (Rust and Glib) disagree on file scheme parsing leading to path traversal.
- Points
- 156
- HN comments
- 56
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacySoftware Engineering2023
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Sep 7, 2023 | When URL parsers disagree by hannob | 156 | 56 |
