← Database

CVE-2022-24278

HIGH CVSS: 7.5 Published: 2022-06-10 Modified: 2026-06-17

Description

The package convert-svg-core before 0.6.4 are vulnerable to Directory Traversal due to improper sanitization of SVG tags. Exploiting this vulnerability is possible by using a specially crafted SVG file.

Affected Platforms

Convert-Svg Project Convert-Svg

Weakness Type

CWE-22

References