CVE-2022-32115

An issue in the isSVG function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file...

CVE-2022-32115

An issue in the isSVG function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file...

CVE-2022-32115

Known is affected by a vulnerability in the isSVG() function that enables arbitrary code execution via a crafted SVG file. Affected versions include Known v1.2.2+2020061101 and v1.3.1, with discussion across multiple feeds indicating the issue resides in isSVG() and impacts how SVGs are parsed. E...

CVE-2022-32115

An issue in the isSVG function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file...

PT-2022-21098

Name of the Vulnerable Software and Affected Versions Known versions 1.2.2 through 1.3.1 Description An issue in the isSVG function allows attackers to execute arbitrary code via a crafted SVG file. The researcher report indicates that versions 1.3.1 and prior are vulnerable. Recommendations For...

CVE-2022-32115: Improper Neutralization of Input During Web Page Generation

An issue in the isSVG function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file...