Lucene search
Veracode Vulnerability DatabaseVERACODE:36477HistoryJul 25, 2022 - 11:28 a.m.
Remote Code Execution
2022-07-2511:28:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
25
svg vulnerability
remote attackers
malicious payloads
sanitization
software vulnerability
EPSS
0.071
Percentile
94.0%
convert-svg-core is vulnerable to remote code execution. Lack of proper sanitization allows remote attackers to upload and execute malicious payloads on the system under attack via a crafted SVG file.
Related
nvd
nvd
CVE-2022-25759
2022-07-22 20:15:09
osv
osv
CVE-2022-25759
2022-07-22 20:15:09
convert-svg-core vulnerable to remote code injection
2022-07-23 00:00:16
cvelist
cvelist
CVE-2022-25759 Remote Code Injection
2022-07-22 20:00:19
cve
cve
CVE-2022-25759
2022-07-22 20:15:09
prion
prion
Code injection
2022-07-22 20:15:00
github
github
convert-svg-core vulnerable to remote code injection
2022-07-23 00:00:16