Remote code execution

2018-01-0314:29:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

JSON

Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution

CPENameOperatorVersion
pepperminty-wikieq0.15

CPE	Name	Operator	Version
	pepperminty-wiki	eq	0.15

References

github.com/sbrl/Pepperminty-Wiki/issues/152