CVE-2017-5617P3HIGHCVSS 7.4fixed in svgsalamander 1.1.1+dfsg-2 (bookworm)2017
CVE-2017-5617 [HIGH] CVE-2017-5617: svgsalamander - The SVG Salamander (aka svgSalamander) library, when used in a web application, ...
The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file.
Scope: local
bookworm: resolved (fixed in 1.1.1+dfsg-2)
bullseye: resolved (fixed in 1.1.1+dfsg-2)
forky: resolved (fixed in 1.1.1+dfsg-2)
sid: resolved (fixed in
debian