Описание
The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| svgsalamander | fixed | 1.1.1+dfsg-2 | package |
Примечания
https://github.com/blackears/svgSalamander/issues/11
https://www.openwall.com/lists/oss-security/2017/01/27/3
EPSS
Процентиль: 77%
0.01078
Низкий
Связанные уязвимости
CVSS3: 7.4
ubuntu
почти 9 лет назад
The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file.
CVSS3: 7.4
nvd
почти 9 лет назад
The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file.
EPSS
Процентиль: 77%
0.01078
Низкий