Em resumo
- CVE-2022-24429 é uma vulnerabilidade ALTO (CVSS 7.8) que afeta convert-svg-core (convert-svg-core project), convert-svg-core.
- Chance de exploração nos próximos 30 dias (EPSS): 0.91%, maior que 60.1% das vulnerabilidades.
- Correção: atualize para 0.6.3 ou posterior.
Description
The package convert-svg-core before 0.6.3 are vulnerable to Arbitrary Code Injection when using a specially crafted SVG file. An attacker can read arbitrary files from the file system and then show the file content as a converted PNG file.
NVD description
The package convert-svg-core before 0.6.3 are vulnerable to Arbitrary Code Injection when using a specially crafted SVG file. An attacker can read arbitrary files from the file system and then show the file content as a converted PNG file.
Mais vulnerabilidades de convert-svg-core
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free