Skip to main content

Svg Salamander

1 CVEs product

Monthly

CVE-2017-5617 Maven HIGH PATCH This Week

The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

SSRF Debian Linux Svg Salamander
NVD GitHub
CVSS 3.1
7.4
EPSS
1.1%
EPSS 1% CVSS 7.4
HIGH PATCH This Week

The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

SSRF Debian Linux Svg Salamander
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy