TI-2025-12980 CVE-2025-14202 · GHSA-cpg4-p69m-3fq5
Cross-Site Request Forgery (CSRF) Leading to Account Takeover via SVG File Upload
Priority LOW 35
A vulnerability in the file upload at bookmark + asset rendering pipeline allows an attacker to upload a malicious SVG file with JavaScript content.