CVE-2023-33733: Reportlab vulnerable to remote code… – CVSS 7.8 · Watchpost

← All vulnerabilities

Reportlab vulnerable to remote code execution

HOCH 7.8CVE-2023-33733 · GHSA-9q9m-c65c-37pq · PYSEC-2026-1871 · Published 05/06/2023 · updated 17/06/2026

Kurz gesagt

CVE-2023-33733 ist eine Schwachstelle (HOCH (CVSS 7.8)) in reportlab, reportlab (reportlab).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.1%, höher als bei 82.0% aller Schwachstellen.
Abhilfe: auf 3.6.13 oder neuer aktualisieren.

Package	Affected versions	Patched versions
reportlab PyPI	`< 3.6.13`	`3.6.13`
reportlab reportlab	`≤ 3.6.12`	No fix yet

Description

Reportlab up to and including v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

NVD description

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

References

nvd.nist.gov/vuln/detail/CVE-2023-33733 · ADVISORY
c53elyas/CVE-2023-33733 · WEB
lists.debian.org/debian-lts-announce/2024/10/msg00008.html · WEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36WOY22ECJCPOXHVTNCHEWOQLL7JSWP4 · WEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ALE727IRACYBTTOFIFG57RS4OA2SHIJ · WEB
lists.fedoraproject.org/archives/list/[email protected]/message/36WOY22ECJCPOXHVTNCHEWOQLL7JSWP4 · WEB
lists.fedoraproject.org/archives/list/[email protected]/message/6ALE727IRACYBTTOFIFG57RS4OA2SHIJ · WEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36WOY22ECJCPOXHVTNCHEWOQLL7JSWP4

Weitere Schwachstellen in reportlab

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free