← Database

CVE-2022-29351

CRITICAL CVSS: 9.8 Published: 2022-05-16 Modified: 2026-07-09

Description

An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnerability here.

Affected Platforms

Tiddlywiki Tiddlywiki5

Weakness Type

CWE-434

References