~ / search / GHSA-53jm-3hc9-fqqc

GHSA-53jm-3hc9-fqqc

Apache Batik vulnerable to Server-Side Request Forgery

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-38648

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.xmlgraphics:batik < 1.15 1.15
Maven org.apache.xmlgraphics:batik-bridge < 1.15 1.15

Details

As written in the advisory (Markdown source, shown as plain text).

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik Bridge versions 1.14 and below.

References

External links from the advisory. They lead to third-party sites.