CVE-2022-29351

An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnerability here...

CVE-2022-29351

CVE-2022-29351 describes an arbitrary file upload vulnerability in the Tiddlywiki5 5.2.2 file upload module that can allow code execution through a crafted SVG file. The vulnerability is echoed across multiple sources, but several connected advisories note that the issue has been disputed or with...

CVE-2022-29351

An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnerability here...