Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-6562

JPX Fragment List (flst) box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachable by a server if the server allows the attacker to upload a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Google

Description

JPX Fragment List (flst) box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachable by a server if the server allows the attacker to upload a specially-crafted the image that is displayed back to the attacker.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kakadu Software Pty Ltd Kakadu SDK

Default version status: unaffected

  • 4.4 to < 8.4affected

References