Lucene search

Apache XML Graphics Batik Server-Side Request Forgery vulnerability

🗓️ 22 Aug 2023 21:26:30Reported by GoogleType

osv🔗 osv.dev👁 26 Views

Apache XML Graphics Batik SSRF vulnerability in version 1.1

Reporter	Title	Published	Views	Family All 47
Atlassian	SSRF org.apache.xmlgraphics:batik-bridge Dependency in Jira Service Management Data Center and Server	13 Dec 202307:45	–	atlassian
Veracode	Server-Side Request Forgery (SSRF)	24 Aug 202305:40	–	veracode
UbuntuCve	CVE-2022-44729	22 Aug 202300:00	–	ubuntucve
Tenable Nessus	Atlassian Jira Service Management Data Center and Server < 4.20.30 / 5.4.x < 5.4.15 / 5.7.x < 5.12.2 (JSDSERVER-14958)	16 Jan 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2022-44729	5 Mar 202500:00	–	nessus
Tenable Nessus	RHEL 8 : fop (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xmlgraphics-batik (SUSE-SU-2024:0808-1)	8 Mar 202400:00	–	nessus
Tenable Nessus	RHEL 7 : batik (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	Oracle Business Intelligence Enterprise Edition (January 2024 CPU)	29 Jan 202400:00	–	nessus
Tenable Nessus	Debian dla-3619 : libbatik-java - security update	14 Oct 202300:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-44729
github	www.github.com/apache/xmlgraphics-batik/commit/85b3457d9902f64d5d409a8da060d5ba47d0b69b
github	www.github.com/apache/xmlgraphics-batik/commit/aaa1dd3e6b5a7df781d73e0c37a1df6a8f318893
github	www.github.com/apache/xmlgraphics-batik
issues	www.issues.apache.org/jira/browse/BATIK-1349
lists	www.lists.apache.org/thread/hco2nw1typoorz33qzs0fcdx0ws6d6j2
lists	www.lists.debian.org/debian-lts-announce/2023/10/msg00021.html
security	www.security.gentoo.org/glsa/202401-11
xmlgraphics	www.xmlgraphics.apache.org/security.html
openwall	www.openwall.com/lists/oss-security/2023/08/22/2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Aug 2023 21:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS37.1

EPSS0.0006