5 matches found
CVE-2017-1000497
Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution...
9.8CVSS7.7AI score0.02547EPSS
SaveExploits0References1
Pepperminty-Wiki XXE Attack Vulnerability
Pepperminty-Wiki is an open source hypertext system. The system supports file uploads, history, and dynamic support. A security vulnerability exists in the 'getsvgsize' function in Pepperminty-Wiki version 0.15. A remote attacker can exploit this vulnerability to cause a denial of service and...
9.8CVSS7AI score0.02547EPSS
SaveExploits0References1
Remote code execution
Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution...
7.5CVSS9.6AI score0.02547EPSS
SaveExploits0References1Affected Software1
20