svg_optimizer rubygem external XML entity (XXE) vulnerability
Date: 2023-10
Affected: rubygems/svg_optimizer
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2023-46035
CWE: CWE-611

An issue in Fnando svg_optimizer v.0.2.6 allows a remote attacker to escalate privileges when optimizing untrusted SVG content.


Mitigations:

Architectural layers (MAESTRO):