In breve
- CVE-2022-29351 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda tiddlywiki5 (tiddlywiki), tiddlywiki.
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.7%, superiore al 85.8% delle vulnerabilità.
- Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.
Description
Withdrawn Advisory
This advisory has been withdrawn because it has been found to not be valid. Please see the issue here for more information.
Original Description
An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file.
NVD description
An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnerability here.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free