Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-29351

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-cr9c-rhq6-vh53

Withdrawn: Code execution via SVG file upload in tiddlywiki ## Withdrawn Advisory This advisory has been withdrawn because it has been found to not be valid. Please see the issue here https://github.com/Jermolene/TiddlyWiki5/issues/7384 for more information. ## Original Description An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file.

gitlab/npm/tiddlywiki/CVE-2022-29351

Unrestricted Upload of File with Dangerous Type An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file.