En resumen
- CVE-2022-29351 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a tiddlywiki5 (tiddlywiki), tiddlywiki.
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.7%, mayor que el 85.8% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
Withdrawn Advisory
This advisory has been withdrawn because it has been found to not be valid. Please see the issue here for more information.
Original Description
An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file.
NVD description
An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnerability here.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free