Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Batik

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2017-5662

    Improper Restriction of XML External Entity Reference in Apache Batik

    In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application…

    Apache Software Foundation Apache Batik batik batik Debian Ubuntu Maven