Xxe

XML external entity XXE vulnerability in the SVG to 1 PNG and 2 JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file...

CVE-2015-0250

XML external entity XXE vulnerability in the SVG to 1 PNG and 2 JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file...

CVE-2015-0250

CVE-2015-0250 describes an XXE vulnerability in Apache Batik 1.x prior to 1.8, affecting the SVG to PNG/JPG conversion paths. The root cause is XML external entity processing within Batik’s SVG handling, enabling a remote attacker to read arbitrary files or cause a denial of service via a crafted...