CVE-2017-5617

The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks…

published March 16, 2017

CVSS
—
EPSS
2%
Percentile
80.5
In the wild
Unconfirmed
What it is

The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01992 · 80.5th percentile
Published
2017-03-16T15:00Z
EPSS history
Timeline
  • 16 MAR 15:00Z
    The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks…
    cvelistv5