CVE-2020-11887

Published April 17th, 2020

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document.

domenic/svg2png

Converts SVGs to PNGs, using PhantomJS

GitHub

601