org.apache.xmlgraphics:batik-bridge

4 results · Feed

• High 7.1
  CVE-2022-44729

  Apache XML Graphics Batik: Information disclosure vulnerability

  Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource…

  Apache Software Foundation Apache XML Graphics Batik batik batik Debian Ubuntu Maven
  Aug 22, 2023
• High 7.5
  CVE-2022-42890

  Apache Batik prior to 1.16 allows RCE via scripting

  A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

  Apache Software Foundation Apache XML Graphics batik batik Debian Ubuntu Maven
  Oct 25, 2022
• Medium 5.3
  CVE-2022-38648

  PDFTranscoder does not block external resources

  Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.

  Apache Software Foundation Apache XML Graphics batik batik Debian Ubuntu Maven
  Sep 22, 2022
• Medium 5.3
  CVE-2022-38398

  Server-Side Request Forgery Information Disclosure Vulnerability

  Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.

  Apache Software Foundation Apache XML Graphics batik batik Debian Ubuntu Maven
  Sep 22, 2022