CVE-2022-29351 | BDVDB-2026-176261 Detail

Description#

An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnerability here.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/jimcola99/corruptsvgfile
https://github.com/Jermolene/TiddlyWiki5
https://www.youtube.com/watch?v=F_DBx4psWns

Exploit#

No public exploit known

History#

Version 12022-05-16Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.