Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-38648HistorySep 22, 2022 - 3:15 p.m.
CVE-2022-38648
2022-09-2215:15:00
Debian Security Bug Tracker
security-tracker.debian.org
23
0.003 Low
EPSS
Percentile
69.1%
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | batik | < 1.15+dfsg-1 | batik_1.15+dfsg-1_all.deb |
| Debian | 11 | all | batik | <= 1.12-4+deb11u2 | batik_1.12-4+deb11u2_all.deb |
| Debian | 10 | all | batik | < 1.10-2+deb10u3 | batik_1.10-2+deb10u3_all.deb |
| Debian | 999 | all | batik | < 1.15+dfsg-1 | batik_1.15+dfsg-1_all.deb |
| Debian | 13 | all | batik | < 1.15+dfsg-1 | batik_1.15+dfsg-1_all.deb |
Related
redhatcve
redhatcve
CVE-2022-38648
2022-12-20 17:05:08
ubuntucve
ubuntucve
CVE-2022-38648
2022-09-22 00:00:00
prion
prion
Server side request forgery (ssrf)
2022-09-22 15:15:00
cve
cve
CVE-2022-38648
2022-09-22 15:15:00
osv
osv
Apache Batik vulnerable to Server-Side Request Forgery
2022-09-23 00:00:40
CVE-2022-38648
2022-09-22 15:15:09
batik - security update
2023-10-14 00:00:00
github
github
Apache Batik vulnerable to Server-Side Request Forgery
2022-09-23 00:00:40
cnvd
cnvd
cvelist
cvelist
CVE-2022-38648 PDFTranscoder does not block external resources
2022-09-22 00:00:00
veracode
veracode
Server-Side Request Forgery
2022-09-26 11:37:26
ibm
ibm
Security Bulletin: There are several vulnerabilities in Apache Batik used by IBM Jazz Reporting Service (CVE-2022-40146, CVE-2022-38648, CVE-2022-38398)
2023-10-04 10:44:16
mageia
mageia
Updated batik packages fix security vulnerabilities
2024-03-16 19:28:17
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0068)
2024-03-18 00:00:00
Debian: Security Advisory (DLA-3619-1)
2023-10-16 00:00:00
Ubuntu: Security Advisory (USN-6117-1)
2023-05-31 00:00:00
amazon
amazon
Important: batik
2023-03-02 21:49:00
Important: batik
2023-03-02 20:21:00
nessus
nessus
Amazon Linux 2 : batik (ALAS-2023-1966)
2023-03-07 00:00:00
Amazon Linux AMI : batik (ALAS-2023-1695)
2023-03-07 00:00:00
Debian DLA-3619-1 : batik - LTS security update
2023-10-14 00:00:00
debian
debian
[SECURITY] [DLA 3619-1] batik security update
2023-10-14 22:16:56
ubuntu
ubuntu
Apache Batik vulnerabilities
2023-05-30 00:00:00
gentoo
gentoo
Apache Batik: Multiple Vulnerabilities
2024-01-07 00:00:00
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00