Vulnerabilidades do Apache Software Foundation Xml Graphics Batik

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Apache Software Foundation Xml Graphics Batik: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:apache:xml_graphics_batik

CVE-2022-44729 Alta · 7.1 CWE-918 22/08/2023

Apache XML Graphics Batik: Information disclosure vulnerability

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.