APSB21-72 Security update available for Adobe SVG-Native-Viewer

Adobe has released a security update for SVG-Native-Viewer Library. This update addresses a critical vulnerability that could lead to arbitrary code execution in the context of the current user...

Adobe SVG-Native-Viewer 安全漏洞

Adobe SVG Native Viewer is a library for parsing and rendering SVG Native documents from Adobe USA. A security vulnerability exists in Adobe SVG-Native-Viewer, which can be exploited by an attacker to execute arbitrary code...

Cross-site Scripting (XSS) - Stored in alanaktion/phproject

✍️ Description stored xss via svg file upload 🕵️‍♂️ Proof of Concept Here i uses demo site https://demo.phproject.org .\ 1. First goto any project and upload a svg file https://github.com/ranjit-git/poc/blob/master/evilsvgfile.svg .\ 2. Now open this svg file using url like...

Cross-site Scripting (XSS) - Stored in chocobozzz/peertube

✍️ Description We can upload a SVG image and then send the url of that to other users and when they open the link we can get their complete session keys as the session keys stored in local storage and with Javascript easily can be stolen by attackers. 🕵️‍♂️ Proof of Concept 1.Go to...

brander (>=0.1.6, <=0.1.9), chin-plugin-convert-svg (>=0.0.1, <=0.0.3) +3 more potentially affected by CVE-2021-23631 via convert-svg-to-jpeg (>=0.3.3, <=0.5.0)

convert-svg-to-jpeg NPM version =0.3.3, =0.1.6, =0.0.1, =0.0.3, =0.2.6, =0.2.21 - xd2svg 0.8.0 Source cves: CVE-2021-23631 Source advisory: SNYK:JS-CONVERTSVGTOJPEG-2348245...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +40 more potentially affected by CVE-2021-23631 via convert-svg-to-png (>=0.3.3, <=0.5.0)

convert-svg-to-png NPM version =0.3.3, =0.0.1, =0.0.18, =1.0.44, =0.1.0, =0.0.1, =0.1.6, =1.0.0, =0.0.1, =1.0.2, =1.0.3, =0.0.1, =1.4.0, =1.5.0 and more Source cves: CVE-2021-23631 Source advisory: SNYK:JS-CONVERTSVGTOPNG-2348244...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +42 more potentially affected by CVE-2021-23631 via convert-svg-core (>=0.3.3, <=0.5.0)

convert-svg-core NPM version =0.3.3, =0.0.1, =0.0.18, =1.0.44, =0.1.0, =0.0.1, =0.1.6, =1.0.0, =0.0.1, =1.0.2, =0.3.0, =0.3.0, =1.0.3, =1.2.1 and more Source cves: CVE-2021-23631 Source advisory: SNYK:JS-CONVERTSVGCORE-1582785...

Cross-site Scripting in the femanager TYPO3 extension

The extension allows by default to upload SVG files when a logged in frontend user uploads a new profile image. This may lead to Cross-Site Scripting, when the uploaded SVG image is used as is on the website. Note: If SVG uploads are required, it is recommended to use the TYPO3 extension...

GHSA-F3RF-V9QM-9C89 Cross-site Scripting in the femanager TYPO3 extension

The extension allows by default to upload SVG files when a logged in frontend user uploads a new profile image. This may lead to Cross-Site Scripting, when the uploaded SVG image is used as is on the website. Note: If SVG uploads are required, it is recommended to use the TYPO3 extension...

Ruby on Rails: Content Security Policy is only active for HTML responses but not for image/svg+xml

A vulnerability was discovered in Rails where the Content Security Policy CSP was only applied to HTML responses and not to image/svg+xml responses. This allowed an attacker to execute malicious JavaScript code by uploading a malicious SVG file and sending a link to the victim...

CVE-2021-36077

Adobe Bridge version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in local application denial of service in the context of the current user. User interaction is required to exploit this vulnerability...

Memory corruption

Adobe Bridge version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in local application denial of service in the context of the current user. User interaction is required to exploit this vulnerability...

Improper access control

Adobe Media Encoder version 15.1 and earlier is affected by an improper memory access vulnerability when parsing a crafted .SVG file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2021-36077

Adobe Bridge 11.x before 11.1.1 is vulnerable to a memory corruption issue caused by improper handling of crafted SVG files, potentially allowing local denial of service in the context of the current user. Exploitation requires user interaction. This is CVE-2021-36077 and is listed among vulnerab...

CVE-2021-36077 Adobe Bridge SVG File Memory Corruption Could Lead To Application Denial Of Service

Adobe Bridge version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in local application denial of service in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-36070 Adobe Media Encoder Improper Memory Access When Parsing SVG Files Could Lead To Remote Code Execution

Adobe Media Encoder version 15.1 and earlier is affected by an improper memory access vulnerability when parsing a crafted .SVG file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2021-36070

CVE-2021-36070 is an Adobe Media Encoder vulnerability affecting version 15.1 and earlier. The issue is an improper memory access when parsing a crafted SVG file, allowing code execution in the context of the current user. Exploitation requires user interaction (the victim must open a malicious f...

Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack

✍️ Description There is svg tag filtration problem in "book page" egit leading to stored XSS. SVG images can be used on book pages, but there is not server side attribute filtration implemented for it. 🕵️‍♂️ Proof of Concept There is filter for href attribute, but inside SVG xlink:href used. That...

Cross-site Scripting (XSS)

next is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious scirpt via image optimization API if next.config.js file have images.domains array assigned and the image host assigned in images.domains which allows user-provided SVG...

CVE-2021-37794

A stored cross-site scripting XSS vulnerability exists in FileBrowser v2.16.0 that allows an authenticated user authorized to upload a malicious .svg file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger malicious OS commands on the...