Remote Code Execution (RCE)

2022-05-1706:19:05

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

72.8%

JSON

tiddlywiki is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the upload function allowing an attacker to inject maliciously crafted script via a crafted SVG file.

CPENameOperatorVersion
tiddlywikile5.2.2
tiddlywikile5.2.2

CPE	Name	Operator	Version
	tiddlywiki	le	5.2.2
	tiddlywiki	le	5.2.2

References

tiddlywiki5.com

github.com/Jermolene/TiddlyWiki5

github.com/jimcola99/corruptsvgfile

www.youtube.com/watch?v=F_DBx4psWns

www.youtube.com/watch?v=F_DBx4psWns&ab_channel=Harun%C3%96z

0.004 Low

EPSS

Percentile

72.8%

JSON

Related for VERACODE:35564