CVE-2022-32115
CVE-2022-32115
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file.
CVSS 6.1 · Medium · EPSS 1.4%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
idno/known Packagist
- Versions
- 1.0.0
- 1.0.0-rc.1
- 1.0.0-rc.3
- 1.2.2
- Affected ranges
- ECOSYSTEM: ≤ 1.3.1
No fix published