GHSA-cr9c-rhq6-vh53
Withdrawn: Code execution via SVG file upload in tiddlywiki
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | tiddlywiki | <= 5.2.2 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
## Withdrawn Advisory
This advisory has been withdrawn because it has been found to not be valid. Please see the issue [here](https://github.com/Jermolene/TiddlyWiki5/issues/7384) for more information.
## Original Description
An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file.
References
External links from the advisory. They lead to third-party sites.