ROS-20221103-03

A vulnerability in the Apache Batik XML SVG graphics rendering, generation, and management library is related to the fact that,
the application allows Java classes to be run via JavaScript. Exploitation of the vulnerability could allow
an attacker acting remotely to use JavaScript to execute a Java class on a system and
obtain the results of its execution

A vulnerability in the Apache Batik XML SVG graphics rendering, generation and management library is associated with an
insecure handling of .jar file references within .svg images. Exploitation of the vulnerability could
allow an attacker acting remotely to upload a malicious .svg image containing links to .jar files and execute the malicious .jar image.
to .jar files and execute arbitrary Java code on the system