Not rated
CVE-2022-38398 Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru…
Description
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache XML Graphics | Versions not published |
References
- lists.apache.org lists.apache.org
- [debian-lts-announce] 20231014 [SECURITY] [DLA 3619-1] batik security update lists.debian.org
- GLSA-202401-11 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of Apache XML Graphics
The 5 CVEs of Apache XML Graphics →
CVE-2022-41704
A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG
7.5
High
CVE-2022-42890
A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript
Not rated
CVE-2022-38648
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external…
Not rated
CVE-2022-40146
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files…
Not rated