CVE-2022-29351

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p84

Published

May 16, 2022 (May 16, 2022)

Modified

Jul 9, 2026

Description

An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnerability here.

Vendors: tiddlywiki
Products: tiddlywiki5
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news0 stories

No ingested article mentions this CVE yet.