The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file.
CVSS 3.1HIGH 7.4·Network·No auth·User interaction·EPSS 0.01992·Published 2017-03-16·Fixed in 1.1.2CWE-918