Lucene search

K

Convert-svg Security Vulnerabilities

cve
cve

CVE-2022-24278

The package convert-svg-core before 0.6.4 are vulnerable to Directory Traversal due to improper sanitization of SVG tags. Exploiting this vulnerability is possible by using a specially crafted SVG file.

9.8CVSS

9.3AI Score

0.001EPSS

2022-06-10 08:15 PM
50
6