Apache Software Foundation Xml Graphics Batik vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apache Software Foundation Xml Graphics Batik: 1 record(s), with affected versions and fixes.
cpe:2.3:a:apache:xml_graphics_batik

CVE-2022-44729 High · 7.1 CWE-918 Aug 22, 2023

Apache XML Graphics Batik: Information disclosure vulnerability

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.