CVE-2023-33733: Reportlab vulnerable to remote code… – CVSS 7.8 · Watchpost

← All vulnerabilities

Reportlab vulnerable to remote code execution

ALTO 7.8CVE-2023-33733 · GHSA-9q9m-c65c-37pq · PYSEC-2026-1871 · Published 05/06/2023 · updated 17/06/2026

Em resumo

CVE-2023-33733 é uma vulnerabilidade ALTO (CVSS 7.8) que afeta reportlab, reportlab (reportlab).
Chance de exploração nos próximos 30 dias (EPSS): 2.1%, maior que 82.0% das vulnerabilidades.
Correção: atualize para 3.6.13 ou posterior.

Package	Affected versions	Patched versions
reportlab PyPI	`< 3.6.13`	`3.6.13`
reportlab reportlab	`≤ 3.6.12`	No fix yet

Description

Reportlab up to and including v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

NVD description

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

References

nvd.nist.gov/vuln/detail/CVE-2023-33733 · ADVISORY
c53elyas/CVE-2023-33733 · WEB
lists.debian.org/debian-lts-announce/2024/10/msg00008.html · WEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36WOY22ECJCPOXHVTNCHEWOQLL7JSWP4 · WEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ALE727IRACYBTTOFIFG57RS4OA2SHIJ · WEB
lists.fedoraproject.org/archives/list/[email protected]/message/36WOY22ECJCPOXHVTNCHEWOQLL7JSWP4 · WEB
lists.fedoraproject.org/archives/list/[email protected]/message/6ALE727IRACYBTTOFIFG57RS4OA2SHIJ · WEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36WOY22ECJCPOXHVTNCHEWOQLL7JSWP4

Mais vulnerabilidades de reportlab

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free