Package · Ubuntu

svgsalamander

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.4

CVE-2017-5617

Server Side Request Forgery in svgSalamander

The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file.

com.kitfox.svg:svg-salamander svgsalamander svgsalamander Debian Ubuntu Maven

Mar 16, 2017