Description (CNA)
An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnerability here.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/jimcola99/corruptsvgfile
- https://github.com/Jermolene/TiddlyWiki5
- https://www.youtube.com/watch?v=F_DBx4psWns
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.