CVE-2022-32115 - An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file

MEDIUM

An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file

Published Jul 8, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 1.37%

An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://blog.jitendrapatro.me/multiple-vulnerabilities-in-idno-known-php-cms-software/		x_refsource_MISCExploitThird Party Advisory
https://github.com/advisories/GHSA-5jgj-h9wp-53fr		Advisory
https://github.com/idno/known		x_refsource_MISCProductThird Party Advisory
https://github.com/idno/known/blob/dev/composer.json#L4
https://github.com/idno/known/commit/80b716a8392fb71cfce84d03aaf7c045c62f6350
https://nvd.nist.gov/vuln/detail/CVE-2022-32115
https://withknown.com/		x_refsource_MISCVendor Advisory