CVE-2017-5617

The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file.

Date published : 2017-03-16

http://www.securityfocus.com/bid/95871

https://github.com/blackears/svgSalamander/issues/11