Libxslt Vulnerability in GNOME Product
CVE-2019-11068

9.8CRITICAL

Key Information:

Vendor: Xmlsoft
Status: Libxslt
Vendor: CVE Published:; 10 April 2019

What is CVE-2019-11068?

A vulnerability exists in libxslt affecting versions up to 1.1.33 that allows an attacker to bypass intended access controls. The xsltCheckRead and xsltCheckWrite functions do not properly handle error codes, which can lead to unauthorized access to resources. Specifically, the functions may incorrectly allow access for crafted URLs that should be deemed invalid, thereby potentially exposing sensitive data or causing other security issues.