Every CVE Search/ Get API key

CVE-2023-38633

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local...

5.5 MediumFix available

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

2.33%Up 2.3 points since Jul 23, 2023
90%50%10%1%

What each source reports

NVD Score used 5.5

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

Record
CVE-2023-38633
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-22
Updated
2026-11-02
CVE List No score

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

Record
CVE-2023-38633
Updated
2026-11-02
EUVDEUVD-2023-42432 No score

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

Record
EUVD-2023-42432
Updated
2026-11-03
GitHub AdvisoriesGHSA-jf6v-gw88-w63q 7.5

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local...

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

Record
GHSA-jf6v-gw88-w63q
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-22
Updated
2026-11-02
OSVALPINE-CVE-2023-38633 5.5

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

Record
ALPINE-CVE-2023-38633
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-03
OSVDEBIAN-CVE-2023-38633 5.5

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

Record
DEBIAN-CVE-2023-38633
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 12 moreShow less
OSVJLSEC-2026-512 5.5

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

Record
JLSEC-2026-512
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2023-1582 5.5

librsvg2 security update

An SVG library based on cairo.

Security Fix(es):

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.(CVE-2023-38633)

Record
OESA-2023-1582
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2023:4809 5.5

Red Hat Security Advisory: librsvg2 security update

Record
RHSA-2023:4809
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2023:5081 5.5

Red Hat Security Advisory: librsvg2 security update

Record
RHSA-2023:5081
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2023-38633 5.5

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

Record
UBUNTU-CVE-2023-38633
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALSA-2023:5081 No score

Moderate: librsvg2 security update

The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library.

Security Fix(es):

  • librsvg: Arbitrary file read when xinclude href has special characters (CVE-2023-38633)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:5081
Updated
2026-11-02
OSV No score

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

Record
CVE-2023-38633
Updated
2026-11-02
OSVMGASA-2023-0259 No score

Updated librsvg packages fix security vulnerability

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element. (CVE-2023-38633)

Record
MGASA-2023-0259
Updated
2026-11-02
OSVopenSUSE-SU-2024:13500-1 No score

gdk-pixbuf-loader-rsvg-2.57.0-4.1 on GA media

These are all security issues fixed in the gdk-pixbuf-loader-rsvg-2.57.0-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13500-1
Updated
2026-11-02
OSVSUSE-SU-2023:3021-1 No score

Security update for librsvg

This update for librsvg fixes the following issues:

librsvg was updated to version 2.52.10:

  • CVE-2023-38633: Fixed directory traversal in URI decoder (bsc#1213502).
Record
SUSE-SU-2023:3021-1
Updated
2026-11-02
OSVSUSE-SU-2023:3208-1 No score

Security update for librsvg

This update for librsvg fixes the following issues:

librsvg was updated to version 2.46.7:

  • CVE-2023-38633: Fixed directory traversal in URI decoder (bsc#1213502).
Record
SUSE-SU-2023:3208-1
Updated
2026-11-02
OSVUSN-6266-1 No score

librsvg vulnerability

Zac Sims discovered that librsvg incorrectly handled decoding URLs. A remote attacker could possibly use this issue to read arbitrary files by using an include element.

Record
USN-6266-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
librsvg
Alpine:v3.18
 2.42.3 up to 2.56.3-r0
2.56.3-r0
librsvg
Alpine:v3.19
 2.42.3 up to 2.56.3-r0
2.56.3-r0
librsvg
Alpine:v3.20
 2.42.3 up to 2.56.3-r0
2.56.3-r0
librsvg
Alpine:v3.21
 2.42.3 up to 2.56.3-r0
2.56.3-r0
librsvg
Alpine:v3.22
 2.42.3 up to 2.56.3-r0
2.56.3-r0
librsvg
Alpine:v3.23
 2.42.3 up to 2.56.3-r0
2.56.3-r0
librsvg
Alpine:v3.24
 2.42.3 up to 2.56.3-r0
2.56.3-r0
librsvg2
AlmaLinux:9
 before 2.50.7-1.el9_2.1
2.50.7-1.el9_2.1
librsvg2-devel
AlmaLinux:9
 before 2.50.7-1.el9_2.1
2.50.7-1.el9_2.1
librsvg2-tools
AlmaLinux:9
 before 2.50.7-1.el9_2.1
2.50.7-1.el9_2.1
Show 49 moreShow less
Affected packages
PackageAffectedFixed
librsvg
Debian:12
 before 2.54.7+dfsg-1~deb12u1, plus listed versions
2.54.5+dfsg-12.54.5+dfsg-22.54.5+dfsg-3
2.54.7+dfsg-1~deb12u1
librsvg
Debian:13
 before 2.54.7+dfsg-1
2.54.7+dfsg-1
librsvg
Debian:14
 before 2.54.7+dfsg-1
2.54.7+dfsg-1
librsvg
Debian:11
 before 2.50.3+dfsg-1+deb11u1, plus listed versions
2.50.3+dfsg-1
2.50.3+dfsg-1+deb11u1
Librsvg_jll
Julia
 2.52.4+0 up to 2.54.7+0
2.54.7+0
librsvg
Mageia:8
 before 2.50.3-1.2.mga8
2.50.3-1.2.mga8
librsvg
Mageia:9
 before 2.56.0-1.1.mga9
2.56.0-1.1.mga9
librsvg2
openEuler:20.03-LTS-SP1
 before 2.50.5-2.oe1
2.50.5-2.oe1
librsvg2
openEuler:20.03-LTS-SP3
 before 2.50.5-2.oe1
2.50.5-2.oe1
librsvg2
openEuler:22.03-LTS
 before 2.50.5-4.oe2203sp2
2.50.5-4.oe2203sp2
librsvg2
openEuler:22.03-LTS-SP1
 before 2.50.5-6.oe2203sp1
2.50.5-6.oe2203sp1
librsvg2
openEuler:22.03-LTS-SP2
 before 2.50.5-4.oe2203sp2
2.50.5-4.oe2203sp2
librsvg2
Red Hat:rhel_eus:9.0::appstream
 before 0:2.50.7-1.el9_0.1
0:2.50.7-1.el9_0.1
librsvg2-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:2.50.7-1.el9_0.1
0:2.50.7-1.el9_0.1
librsvg2-debugsource
Red Hat:rhel_eus:9.0::appstream
 before 0:2.50.7-1.el9_0.1
0:2.50.7-1.el9_0.1
librsvg2-devel
Red Hat:rhel_eus:9.0::appstream
 before 0:2.50.7-1.el9_0.1
0:2.50.7-1.el9_0.1
librsvg2-tools
Red Hat:rhel_eus:9.0::appstream
 before 0:2.50.7-1.el9_0.1
0:2.50.7-1.el9_0.1
librsvg2-tools-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:2.50.7-1.el9_0.1
0:2.50.7-1.el9_0.1
librsvg2
Red Hat:enterprise_linux:9::appstream
 before 0:2.50.7-1.el9_2.1
0:2.50.7-1.el9_2.1
librsvg2-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.50.7-1.el9_2.1
0:2.50.7-1.el9_2.1
librsvg2-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:2.50.7-1.el9_2.1
0:2.50.7-1.el9_2.1
librsvg2-devel
Red Hat:enterprise_linux:9::appstream
 before 0:2.50.7-1.el9_2.1
0:2.50.7-1.el9_2.1
librsvg2-tools
Red Hat:enterprise_linux:9::appstream
 before 0:2.50.7-1.el9_2.1
0:2.50.7-1.el9_2.1
librsvg2-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.50.7-1.el9_2.1
0:2.50.7-1.el9_2.1
librsvg
SUSE:Linux Enterprise Micro 5.3
 before 2.52.10-150400.3.6.1
2.52.10-150400.3.6.1
librsvg
SUSE:Linux Enterprise Micro 5.4
 before 2.52.10-150400.3.6.1
2.52.10-150400.3.6.1
librsvg
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 2.52.10-150400.3.6.1
2.52.10-150400.3.6.1
librsvg
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 2.52.10-150400.3.6.1
2.52.10-150400.3.6.1
librsvg
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
 before 2.52.10-150400.3.6.1
2.52.10-150400.3.6.1
librsvg
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
 before 2.52.10-150400.3.6.1
2.52.10-150400.3.6.1
librsvg
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 2.52.10-150400.3.6.1
2.52.10-150400.3.6.1
librsvg
openSUSE:Leap Micro 5.3
 before 2.52.10-150400.3.6.1
2.52.10-150400.3.6.1
librsvg
openSUSE:Leap Micro 5.4
 before 2.52.10-150400.3.6.1
2.52.10-150400.3.6.1
librsvg
openSUSE:Leap 15.4
 before 2.52.10-150400.3.6.1
2.52.10-150400.3.6.1
librsvg
openSUSE:Leap 15.5
 before 2.52.10-150400.3.6.1
2.52.10-150400.3.6.1
librsvg
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 2.46.7-150200.3.9.1
2.46.7-150200.3.9.1
librsvg
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 2.46.7-150200.3.9.1
2.46.7-150200.3.9.1
librsvg
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 2.46.7-150200.3.9.1
2.46.7-150200.3.9.1
librsvg
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 2.46.7-150200.3.9.1
2.46.7-150200.3.9.1
librsvg
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 2.46.7-150200.3.9.1
2.46.7-150200.3.9.1
librsvg
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 2.46.7-150200.3.9.1
2.46.7-150200.3.9.1
librsvg
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 2.46.7-150200.3.9.1
2.46.7-150200.3.9.1
librsvg
SUSE:Manager Proxy 4.2
 before 2.46.7-150200.3.9.1
2.46.7-150200.3.9.1
librsvg
SUSE:Manager Server 4.2
 before 2.46.7-150200.3.9.1
2.46.7-150200.3.9.1
librsvg
SUSE:Linux Enterprise Micro 5.2
 before 2.46.7-150200.3.9.1
2.46.7-150200.3.9.1
librsvg
SUSE:Enterprise Storage 7
 before 2.46.7-150200.3.9.1
2.46.7-150200.3.9.1
librsvg
SUSE:Enterprise Storage 7.1
 before 2.46.7-150200.3.9.1
2.46.7-150200.3.9.1
librsvg
Ubuntu:20.04:LTS
 before 2.48.9-1ubuntu0.20.04.4, plus listed versions
2.44.14-12.46.4-12.46.4-1ubuntu12.48.0-12.48.2-12.48.7-1ubuntu0.20.04.12.48.9-1ubuntu0.20.04.1
2.48.9-1ubuntu0.20.04.4
librsvg
Ubuntu:22.04:LTS
 before 2.52.5+dfsg-3ubuntu0.2, plus listed versions
2.50.7+dfsg-12.50.7+dfsg-22.52.5+dfsg-1ubuntu12.52.5+dfsg-3
2.52.5+dfsg-3ubuntu0.2

History

History
RecordedChangedSources
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-38633 is a medium vulnerability (CVSS 5.5) in Gnome Librsvg, published July 22, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.33%, the 83rd percentile. Fixed in librsvg 2.56.3-r0.

References

Show 33 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open