CVE-2020-12882

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
May 15, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-128839.1Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packetCVE-2020-128849.1A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packetCVE-2020-128857.5An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets.CVE-2020-128869.1A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packetCVE-2020-128877.5Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responCVE-2020-128885.3The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.CVE-2020-128899.8MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case.CVE-2020-12895.4A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SCVE-2020-128906.7Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or adminisCVE-2020-128917.8AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL filCVE-2020-128927.8An untrusted search path in AMD Radeon settings Installer may lead to a privilege escalation or unauthorized code execution.CVE-2020-128937.8Stack Buffer Overflow in AMD Graphics Driver for Windows 10 in Escape 0x15002a may lead to escalation of privilege or denial of service.
CVE-2020-12882: Medium severity, CVSS 5.4 | Vulnix