mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-26 05:17:47 +02:00
710 B
710 B
CVE-2022-25759
Description
The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload.
POC
Reference
- https://github.com/neocotic/convert-svg/issues/81
- https://security.snyk.io/vuln/SNYK-JS-CONVERTSVGCORE-2849633
Github
No PoCs found on GitHub currently.