org.apache.xmlgraphics:batik-bridge

2 results · Clear filters · Feed

• High 7.1
  CVE-2022-44729

  Apache XML Graphics Batik: Information disclosure vulnerability

  Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource…

  Apache Software Foundation Apache XML Graphics Batik batik batik Debian Ubuntu Maven
  Aug 22, 2023
• High 7.5
  CVE-2022-42890

  Apache Batik prior to 1.16 allows RCE via scripting

  A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

  Apache Software Foundation Apache XML Graphics batik batik Debian Ubuntu Maven
  Oct 25, 2022