CVE-2017-1000497

Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution...

Pepperminty-Wiki XXE Attack Vulnerability

Pepperminty-Wiki is an open source hypertext system. The system supports file uploads, history, and dynamic support. A security vulnerability exists in the 'getsvgsize' function in Pepperminty-Wiki version 0.15. A remote attacker can exploit this vulnerability to cause a denial of service and...

CVE-2017-1000497

Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution...

CVE-2017-1000497

Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution...

Remote code execution

Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution...

CVE-2017-1000497

Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution...

PT-2018-5261

Name of the Vulnerable Software and Affected Versions Pepperminty-Wiki version 0.15 Description The issue concerns an XXE XML External Entity attack in the getsvgsize function, potentially leading to denial of service and possibly remote code execution. Recommendations For Pepperminty-Wiki versio...

CVE-2017-1000497: Improper Restriction of XML External Entity Reference

Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution...