Aller au contenu
Se connecter
Non notée

CVE-2020-11987 Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the…

Description

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache Batik Versions non publiées

Autres CVE de Apache Batik

Les 2 CVE de Apache Batik →
CVE-2019-17566 Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href"… Non notée
Suivre cette CVE