PT-2025-32689 · Unknown · Svg-Sanitizer

Published 2025-08-12 · Updated 2025-08-12 · CVE-2025-55166

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: savg-sanitizer versions prior to 0.22.0

Description: savg-sanitizer is a PHP SVG/XML sanitizer. The sanitization logic in the cleanXlinkHrefs function only searches for lower-case attribute names, bypassing the isHrefSafeValue check. This allows for cross-site scripting or linking to external domains.

Recommendations: Update to savg-sanitizer version 0.22.0 or later.

Exploit

Fix

Open Redirect

XSS

Weakness Enumeration

CWE-601

CWE-79

Related Identifiers

CVE-2025-55166

GHSA-22WQ-Q86M-83FH

Affected Products

Svg-Sanitizer

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/55xxx/CVE-2025-55166.json · Exploit
• https://osv.dev/vulnerability/GHSA-22wq-q86m-83fh · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-55166 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55166 · Security Note
• https://github.com/darylldoyle/svg-sanitizer · Note
• https://github.com/darylldoyle/svg-sanitizer/blob/0.21.0/src/Sanitizer.php#L454-L481 · Note
• https://github.com/darylldoyle/svg-sanitizer/commit/0afa95ea74be155a7bcd6c6fb60c276c39984500 · Note
• https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-22wq-q86m-83fh · Note
• https://github.com/darylldoyle/svg-sanitizer/commit/5a0a1eaf0c6b0b540dc945fe30c93cf106b357c1 · Note
• https://github.com/darylldoyle/svg-sanitizer/releases/tag/0.22.0 · Note
• https://twitter.com/CVEnew/status/1955311108098793840 · Twitter Post