PT-2019-5892 · Reportlab+4 · Reportlab+4
Published
2019-10-16
·
Updated
2024-08-01
·
CVE-2019-17626
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ReportLab versions prior to 3.5.27
Description
The issue is related to the
toColor(eval(arg)) function in the ReportLab library, which is connected to an error in processing XML documents. This can be exploited by a remote attacker to gain access to confidential data, compromise data integrity, and cause a denial of service. The exploitation can be achieved through a crafted XML document containing arbitrary Python code, for example, using the <span color=" endpoint followed by malicious code.Recommendations
For ReportLab versions prior to 3.5.27, update to version 3.5.27 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
toColor(eval(arg)) function in the colors.py module to minimize the risk of exploitation. Avoid using the eval(arg) parameter in the affected API endpoint until the issue is resolved.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Centos
Red Hat
Reportlab
Suse
Ubuntu