ai.tock:tock-shared (>=19.9.4, <=26.9.0), at.datenwort.openhtmltopdf:openhtmltopdf-latex-support (1.1.3) +1865 more potentially affected by CVE-2022-44729 via org.apache.xmlgraphics:batik-transcoder (>=1.6.1, <=1.16)

org.apache.xmlgraphics:batik-transcoder MAVEN version =1.6.1, =19.9.4, =0.1.1, =0.5.0, =0.11.1, =0.0.2, =0.0.2, =1.3.5, =1.3.7 and more Source cves: CVE-2022-44729 Source advisory: GHSA-GQ5F-XV48-2365...

Apache XML Graphics Batik Server-Side Request Forgery vulnerability

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even...

GHSA-2474-2566-3QXP Apache Batik information disclosure vulnerability

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL...

ai.tock:tock-shared (>=19.9.4, <=26.9.0), at.austriapro:ebinterface-rendering (>=1.0.0, <=1.0.1) +1992 more potentially affected by CVE-2022-44730 via org.apache.xmlgraphics:batik-script (>=1.6.1, <=1.16)

org.apache.xmlgraphics:batik-script MAVEN version =1.6.1, =19.9.4, =1.0.0, =1.0.7, =1.10.2, =1.13.0, =0.1.1, =0.5.0, =0.11.1, =0.0.2, =0.2.1 - berlin.softwaretechnik:geojsonrenderer2.13 0.0.1 - bio.ferlab:obo-parser2.12 1.3.1 and more Source cves: CVE-2022-44730 Source advisory:...

GHSA-GQ5F-XV48-2365 Apache XML Graphics Batik Server-Side Request Forgery vulnerability

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even...

bio.ferlab:obo-parser_2.12 (1.3.1), camp.xit.jacod:jacod-provider-xlsx (>=1.3.5, <=1.3.7) +568 more potentially affected by CVE-2022-44729 via org.apache.xmlgraphics:batik-svgrasterizer (>=1.9, <=1.16)

org.apache.xmlgraphics:batik-svgrasterizer MAVEN version =1.9, =1.3.5, =1.1.0, =2021.8.0, =4.20.0, =0.0.1, =1.0.0, =2.0.0, =2.0.0, =2.1.0, =3.0.0-beta3, =3-beta9 and more Source cves: CVE-2022-44729 Source advisory: OSV:GHSA-GQ5F-XV48-2365...

ai.tock:tock-shared (>=19.9.4, <=26.9.0), at.datenwort.openhtmltopdf:openhtmltopdf-latex-support (1.1.3) +1865 more potentially affected by CVE-2022-44729 via org.apache.xmlgraphics:batik-transcoder (>=1.6.1, <=1.16)

org.apache.xmlgraphics:batik-transcoder MAVEN version =1.6.1, =19.9.4, =0.1.1, =0.5.0, =0.11.1, =0.0.2, =0.0.2, =1.3.5, =1.3.7 and more Source cves: CVE-2022-44729 Source advisory: OSV:GHSA-GQ5F-XV48-2365...

DEBIAN-CVE-2022-44729

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even...

DEBIAN-CVE-2022-44730

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL...

CVE-2022-44729

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even...

CVE-2022-44730

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL...

CVE-2022-44729

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even...

UBUNTU-CVE-2022-44730

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL...

UBUNTU-CVE-2022-44729

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even...

CVE-2022-44730

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even...

CVE-2022-44729

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even...

ai.tock:tock-shared (>=19.9.4, <=26.9.0), at.austriapro:ebinterface-rendering (>=1.0.0, <=1.0.1) +1992 more potentially affected by CVE-2022-44729 via org.apache.xmlgraphics:batik-bridge (>=1.6.1, <=1.16)

org.apache.xmlgraphics:batik-bridge MAVEN version =1.6.1, =19.9.4, =1.0.0, =1.0.7, =1.10.2, =1.13.0, =0.1.1, =0.5.0, =0.11.1, =0.0.2, =0.2.1 - berlin.softwaretechnik:geojsonrenderer2.13 0.0.1 - bio.ferlab:obo-parser2.12 1.3.1 and more Source cves: CVE-2022-44729 Source advisory: MEND:CVE-2022-447...

CVE-2022-44729

CVE-2022-44729 describes a Server-Side Request Forgery (SSRF) in Apache Batik (Apache XML Graphics Batik) affecting version 1.16, where a crafted SVG could trigger loading external resources by default. This behavior can lead to resource consumption and potential information disclosure. The conne...