Lucene search
+L

479 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/10/04 12:0 a.m.31 views

Apache Batik DefaultScriptSecurity Server-Side Request Forgery Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apache Batik. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

8.1CVSS3.7AI score0.05791EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/04 12:0 a.m.37 views

Apache Batik DefaultExternalResourceSecurity Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apache Batik. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

7.5CVSS2.8AI score0.02017EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/09/26 12:0 a.m.35 views

Apache XML Graphics Batik Server-Side Request Forgery Vulnerability (CNVD-2022-73690)

Apache XML Graphics Batik is a Java-based application from the Apache Foundation that is primarily used to process images in SVG format. Apache XML Graphics Batik is vulnerable to server-side request forgery, which is caused by a flaw when calling the fop function. An attacker could exploit the...

2AI score0.01954EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/09/26 12:0 a.m.143 views

Apache XML Graphics Batik Server-Side Request Forgery Vulnerability

Apache XML Graphics Batik is a Java-based application from the Apache Foundation that is primarily used to process images in SVG format.Apache XML Graphics Batik is vulnerable to server-side request forgery, which is caused by a flaw in the DefaultScriptSecurity function. An attacker could exploi...

1.9AI score0.05791EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2022/09/26 12:0 a.m.36 views

Apache XML Graphics Batik Server-Side Request Forgery Vulnerability (CNVD-2022-73693)

Apache XML Graphics Batik is a Java-based application from the Apache Foundation that is primarily used to process images in SVG format.A server-side request forgery vulnerability exists in Apache XML Graphics Batik due to a flaw in the A flaw in the DefaultExternalResourceSecurity function cause...

2.4AI score0.02017EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2022/09/23 12:0 a.m.36 views

GHSA-H4QG-P7R2-CPG3 Apache Batik vulnerable to Server-Side Request Forgery

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14...

7.5CVSS7.4AI score0.05791EPSS
SaveExploits1References7
OSV
OSV
added 2022/09/23 12:0 a.m.7 views

GHSA-53JM-3HC9-FQQC Apache Batik vulnerable to Server-Side Request Forgery

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik Bridge versions 1.14 and below...

5.3CVSS6.8AI score0.01954EPSS
SaveExploits0References8
OSV
OSV
added 2022/09/23 12:0 a.m.7 views

GHSA-C5XV-QC8P-MH2V Apache Batik Server-Side Request Forgery

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS7.1AI score0.02017EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/09/23 12:0 a.m.46 views

Apache Batik Server-Side Request Forgery

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS6.3AI score0.02017EPSS
SaveExploits0References7Affected Software2
OSV
OSV
added 2022/09/22 3:15 p.m.0 views

DEBIAN-CVE-2022-38398

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS6.5AI score0.02017EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/22 3:15 p.m.27 views

CVE-2022-38398

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS0.02017EPSS
SaveExploits0References4
OSV
OSV
added 2022/09/22 3:15 p.m.1 views

DEBIAN-CVE-2022-38648

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS6.5AI score0.01954EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/22 3:15 p.m.2 views

DEBIAN-CVE-2022-40146

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14...

7.5CVSS7.5AI score0.05791EPSS
SaveExploits1References1
NVD
NVD
added 2022/09/22 3:15 p.m.26 views

CVE-2022-40146

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14...

7.5CVSS0.05791EPSS
SaveExploits1References4
Prion
Prion
added 2022/09/22 3:15 p.m.26 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14...

5CVSS6.1AI score0.01954EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2022/09/22 3:15 p.m.38 views

CVE-2022-40146

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14...

7.5CVSS7.1AI score0.05791EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2022/09/22 3:15 p.m.36 views

CVE-2022-38648

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS6.8AI score0.01954EPSS
SaveExploits0References3
Prion
Prion
added 2022/09/22 3:15 p.m.22 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14...

5CVSS7.3AI score0.05791EPSS
SaveExploits1References3Affected Software2
OSV
OSV
added 2022/09/22 3:15 p.m.5 views

UBUNTU-CVE-2022-38398

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS7.1AI score0.02017EPSS
SaveExploits0References4
OSV
OSV
added 2022/09/22 3:15 p.m.5 views

UBUNTU-CVE-2022-40146

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14...

7.5CVSS7.1AI score0.05791EPSS
SaveExploits1References4
Rows per page
Query Builder