CVE-2017-5617: Server Side Request Forgery in svgSalamander
Summary
CVE-2017-5617: Server Side Request Forgery in svgSalamander. Affects com.kitfox.svg:svg-salamander versions < 1.1.2. Fixed in 1.1.2. How to fix ↓
Also tracked for
- svgsalamander · Debian:11
The same CVE-2017-5617 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The svgSalamander library is a Maven package that provides functionality for working with SVG files in web applications. It allows developers to parse and manipulate SVG files. However, a vulnerability has been discovered in the library that can be exploited by attackers to conduct server-side request forgery (SSRF) attacks. SSRF allows an attacker to make requests to internal resources on the server, potentially leading to unauthorized access or information disclosure.
Vulnerability Detail
The vulnerability in svgSalamander arises from the handling of the xlink:href attribute in SVG files. By crafting a malicious SVG file with a specially crafted xlink:href attribute, an attacker can trick the server into making requests to internal resources. This can be used to bypass access controls, retrieve sensitive information, or perform actions on behalf of the server. The vulnerability has a CVSS score of 7.4, indicating a high severity level.
How To Fix
Minimum fixed version
1.1.2
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If updating the svgSalamander library is not immediately feasible, a possible workaround is to implement server-side input validation for the xlink:href attribute in SVG files. This can involve checking the value of the attribute against a whitelist of allowed domains or IP addresses. By restricting the allowed values, the risk of SSRF attacks can be reduced. However, this workaround is not as effective as updating to the fixed version of the library.
Conclusion
The svgSalamander library is vulnerable to server-side request forgery (SSRF) attacks due to improper handling of the xlink:href attribute in SVG files. To mitigate this vulnerability, it is crucial to update the library to version 1.1.2 or later. If immediate updating is not possible, implementing server-side input validation can serve as a temporary workaround. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for com.kitfox.svg:svg-salamander →
FAQ
svgSalamander is a Maven package that provides functionality for working with SVG files in web applications. It allows parsing and manipulation of SVG files.
Server-side request forgery (SSRF) is a type of vulnerability that allows an attacker to make requests to internal resources on the server. This can be used to bypass access controls, retrieve sensitive information, or perform actions on behalf of the server.
The vulnerability in svgSalamander can be exploited by attackers to conduct server-side request forgery (SSRF) attacks. This can lead to unauthorized access to internal resources, information disclosure, or actions performed on behalf of the server.
To fix this vulnerability, it is recommended to update the svgSalamander library to version 1.1.2 or later. This version includes a fix for the SSRF vulnerability.
If updating the svgSalamander library is not immediately feasible, a possible workaround is to implement server-side input validation for the xlink:href attribute in SVG files.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
