Server-Side Request Forgery (SSRF) in apostrophecms/apostrophe

✍️ Description Rendering Of SVG file causes SSRF 🕵️‍♂️ Proof of Concept /image.jpeg" / upload the svg file with the payload mentioned above change server name and preview it. then check the server for incoming request. 💥 Impact SSRF basic attack - host redirect , further researches of this attack...

Shopware Cross-Site Scripting Vulnerability (CNVD-2021-94930)

Shopware is an open source e-commerce software. cross-site scripting vulnerability exists in versions of Shopware prior to 6.4.3.1. An attacker can exploit the vulnerability to conduct cross-site scripting attacks via SVG media files...

SuiteCRM 跨站脚本漏洞

SuiteCRM is a customer relationship management system from the SuiteCRM Suitecrm team. A cross-site scripting vulnerability exists in SuiteCRM, which stems from the product's cleanfileoutput protection mechanism not validating SVG file uploads. The vulnerability can be exploited to execute...

PT-2021-4668 · Adobe · Media Encoder

Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 15.1 and earlier Description: The issue is related to improper memory access when parsing a crafted .SVG file, which could allow an attacker to execute code in the context of the current user. Exploitation require...

CVE-2021-37710 Cross-Site Scripting via SVG media files

Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a Cross-Site Scripting vulnerability via SVG media files. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin...

CVE-2021-37710

Shopware exposes a Cross-Site Scripting (XSS) vulnerability via SVG media files in all releases before 6.4.3.1. The fixed version is 6.4.3.1; for older major versions (6.1–6.3) the advisory notes security workarounds via a plugin. Multiple sources (vendor advisory, CVE records) confirm the issue ...

CVE-2021-24362

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded SVG files added to a gallery do not contain malicious content. As a result, users allowed to add images to gallery can upload an SVG file containing JavaScript code, which will b...

CVE-2021-24362

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded SVG files added to a gallery do not contain malicious content. As a result, users allowed to add images to gallery can upload an SVG file containing JavaScript code, which will b...

Cross site scripting

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded SVG files added to a gallery do not contain malicious content. As a result, users allowed to add images to gallery can upload an SVG file containing JavaScript code, which will...

CVE-2021-24362 Photo Gallery < 1.5.75 - Stored Cross-Site Scripting via Uploaded SVG

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded SVG files added to a gallery do not contain malicious content. As a result, users allowed to add images to gallery can upload an SVG file containing JavaScript code, which will b...

CVE-2021-24362

The CVE-2021-24362 entry concerns the WordPress plugin “Photo Gallery by 10Web – Mobile-Friendly Image Gallery” (older builds). Affected versions prior to 1.5.75 fail to sanitize uploaded SVG content, allowing a user who can add images to a gallery to upload an SVG containing JavaScript. When the...

Cross-site Scripting (XSS)

femanageris vulnerable to Cross-site Scripting. The vulnerability exists due to insufficient sanitization of user-supplied data in the SVG image. A remote authenticated attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in...

CVE-2021-36787

The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document...

CVE-2021-36787

The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document...

Design/Logic Flaw

The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document...

CVE-2021-36787

The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document...

CVE-2021-33199

In Expression Engine before 6.0.3, addonIcon in Addons/file/mod.file.php relies on the untrusted input value of input-get'file' instead of the fixed file names of icon.png and icon.svg...

Nextcloud: Arbitrary read of all SVG files on a Nextcloud server

Vulnerability description not provided...

The vulnerability of the DOMSVGLength class in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a malicious actor to execute arbitrary code.

The vulnerability of the DOMSVGLength class in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by using incorrect interactions between JavaScript code an...

openSUSE: Security Advisory for python-CairoSVG, (openSUSE-SU-2021:1134-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...