writeups.xyz / When URL parsers disagree (CVE-2023-38633)

Submitter : c2a

Date: 5 September 2023

Bounty : undisclosed

Vulnerabilities :

• Path Traversal
• Security Code Review

Programs :

• Canva
• Librsvg

Authors :

• Zac Sims

Link :
https://www.canva.dev/blog/engineering/when-url-parsers-disagree-cve-2023-38633/