PT-2019-15702 · Safe-Svg · Safe-Svg

CVE-2019-18854

Publicado

2019-11-11

Atualizado

2023-10-24

CVSS v3.1

7.5

Alta

Vetor

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions safe-svg plugin versions through 1.9.4

Description A Denial Of Service issue exists, related to unlimited recursion for a '<use ... xlink:href="#identifier">' substring.

Recommendations For versions through 1.9.4, update to a version later than 1.9.4 to resolve the issue.

Correção

DoS

Uncontrolled Recursion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2019-18854

Safe-Svg