Description
An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | idno/known | <= 1.3.1 | — | GHSA-5jgj-h9wp-53fr |
Medium · 6.1
CVE-2022-32115
EUVD-2022-6245GHSA-5jgj-h9wp-53fr
Known vulnerable to code execution via SVG file in v1.3.1
Published Jul 8, 2022 · Updated Aug 3, 2024 · Assigned by mitre