Filtered by vendor Apache Subscriptions
Filtered by product Xml Graphics Batik Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-44730 2 Apache, Debian 2 Xml Graphics Batik, Debian Linux 2024-01-07 4.4 Medium
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL.
CVE-2022-44729 2 Apache, Debian 2 Xml Graphics Batik, Debian Linux 2024-01-07 7.1 High
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.