Skip to content
Sign in
Not rated

CVE-2020-11987 Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the…

Description

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

Affected products and versions

Product Affected versions Fixed in
Apache Batik Versions not published

Other CVEs of Apache Batik

The 2 CVEs of Apache Batik →
CVE-2019-17566 Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href"… Not rated
Track this CVE