CVE-2017-5617
The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file.
CVSS 3.1 · 7.4 High
EPSS 2.0%
KEV · Not listed
Vendors
Products