Product · Apache Software Foundation

Apache XML Graphics

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.3

CVE-2022-38648

PDFTranscoder does not block external resources

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.

Apache Software Foundation Apache XML Graphics batik batik Debian Ubuntu Maven

Sep 22, 2022
Medium 5.3

CVE-2022-38398

Server-Side Request Forgery Information Disclosure Vulnerability

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.

Apache Software Foundation Apache XML Graphics batik batik Debian Ubuntu Maven

Sep 22, 2022