CVE-2023-33733: Reportlab vulnerable to remote code… – CVSS 7.8 · Watchpost

← All vulnerabilities

Reportlab vulnerable to remote code execution

高危 7.8CVE-2023-33733 · GHSA-9q9m-c65c-37pq · PYSEC-2026-1871 · Published 05/06/2023 · updated 17/06/2026

要点

CVE-2023-33733 是影响 reportlab, reportlab (reportlab) 的高危 (CVSS 7.8)漏洞。
未来 30 天内被利用的概率（EPSS）：2.1%，高于 82.0% 的漏洞。
修复：升级到 3.6.13 或更高版本。

Package	Affected versions	Patched versions
reportlab PyPI	`< 3.6.13`	`3.6.13`
reportlab reportlab	`≤ 3.6.12`	No fix yet

Description

Reportlab up to and including v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

NVD description

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

References

nvd.nist.gov/vuln/detail/CVE-2023-33733 · ADVISORY
c53elyas/CVE-2023-33733 · WEB
lists.debian.org/debian-lts-announce/2024/10/msg00008.html · WEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36WOY22ECJCPOXHVTNCHEWOQLL7JSWP4 · WEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ALE727IRACYBTTOFIFG57RS4OA2SHIJ · WEB
lists.fedoraproject.org/archives/list/[email protected]/message/36WOY22ECJCPOXHVTNCHEWOQLL7JSWP4 · WEB
lists.fedoraproject.org/archives/list/[email protected]/message/6ALE727IRACYBTTOFIFG57RS4OA2SHIJ · WEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36WOY22ECJCPOXHVTNCHEWOQLL7JSWP4

reportlab 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free