Skip to content
OpenAdvisories

Package · Maven

org.apache.xmlgraphics:batik-svgbrowser

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    CVE-2020-11987 EPSS 14%

    Server-side request forgery (SSRF) in Apache Batik

    Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GE…

    batik batik org.apache.xmlgraphics:batik-svgbrowser Debian Ubuntu Maven