CVE-2017-1000497

2022-10-0316:23:10

mitre

www.cve.org

pepperminty-wiki

version 0.15

xxe vulnerability

denial of service

remote code execution

9.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

JSON

Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution

References

github.com/sbrl/Pepperminty-Wiki/issues/152