writeups.xyz / CVE-2023-33733 RCE via HTMLi in reportlab

Submitter : c2a

Date: 18 October 2023

Bounty : 4,500

Vulnerabilities :

• RCE
• HTML Injection
• Code Injection
• SSRF
• Components With Known Vulnerabilities

Programs :

• ReportLab

Authors :

• Sudhanshu Rajbhar (@Sudhanshur705)

Link :
https://github.com/Sudistark/BB-Writeups/blob/main/2023/CVE-2023-33733-rce-via-htmli-in-reportlab.md