CVE-2023-33733: Reportlab vulnerable to remote code… – CVSS 7.8 · Watchpost

← All vulnerabilities

Reportlab vulnerable to remote code execution

ÉLEVÉE 7.8CVE-2023-33733 · GHSA-9q9m-c65c-37pq · PYSEC-2026-1871 · Published 05/06/2023 · updated 17/06/2026

En bref

CVE-2023-33733 est une vulnérabilité ÉLEVÉE (CVSS 7.8) touchant reportlab, reportlab (reportlab).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.1%, plus élevée que 82.0% des vulnérabilités.
Correctif : mettre à jour vers 3.6.13 ou plus récent.

Package	Affected versions	Patched versions
reportlab PyPI	`< 3.6.13`	`3.6.13`
reportlab reportlab	`≤ 3.6.12`	No fix yet

Description

Reportlab up to and including v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

NVD description

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

References

nvd.nist.gov/vuln/detail/CVE-2023-33733 · ADVISORY
c53elyas/CVE-2023-33733 · WEB
lists.debian.org/debian-lts-announce/2024/10/msg00008.html · WEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36WOY22ECJCPOXHVTNCHEWOQLL7JSWP4 · WEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ALE727IRACYBTTOFIFG57RS4OA2SHIJ · WEB
lists.fedoraproject.org/archives/list/[email protected]/message/36WOY22ECJCPOXHVTNCHEWOQLL7JSWP4 · WEB
lists.fedoraproject.org/archives/list/[email protected]/message/6ALE727IRACYBTTOFIFG57RS4OA2SHIJ · WEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36WOY22ECJCPOXHVTNCHEWOQLL7JSWP4

Autres vulnérabilités de reportlab

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free