CVE-2017-1000497

2018-01-0314:00:00

mitre

www.cve.org

pepperminty-wiki

version 0.15

xxe vulnerability

denial of service

remote code execution

AI Score

9.7

Confidence

High

EPSS

0.008

Percentile

81.9%

JSON

Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution

References

github.com/sbrl/Pepperminty-Wiki/issues/152