CVE-2020-12882

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow

published May 15, 2020

CVSS
—
EPSS
1%
Percentile
68.0
In the wild
Unconfirmed
What it is

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01203 · 68.0th percentile
Published
2020-05-15T04:55Z
EPSS history
Timeline
  • 15 MAY 04:55Z
    Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow
    cvelistv5