writeups.xyz / Wikimedia/svgtranslate 2.0.1 Remote Code Execution

Submitter : c2a

Date: 23 May 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• OS Command Injection
• Security Code Review

Programs :

• Wikimedia (SVGTranslate)

Authors :

• Valentin Lobstein (@Chocapikk_)

Link :
https://chocapikk.com/posts/2024/svgtranslate/