Lucene search
+L

471 matches found

Prion
Prion
added 2023/08/22 7:16 p.m.34 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even...

3.3CVSS6.5AI score0.00786EPSS
SaveExploits0References6Affected Software2
UbuntuCve
UbuntuCve
added 2023/08/22 7:16 p.m.56 views

CVE-2022-44729

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even...

7.1CVSS6.8AI score0.00786EPSS
SaveExploits0References7
OSV
OSV
added 2023/08/22 7:16 p.m.9 views

UBUNTU-CVE-2022-44730

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL...

4.4CVSS7.1AI score0.00749EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2023/08/22 7:16 p.m.69 views

CVE-2022-44730

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL...

4.4CVSS6.8AI score0.00749EPSS
SaveExploits0References7
CVE
CVE
added 2023/08/22 2:12 p.m.454 views

CVE-2022-44729

CVE-2022-44729 describes a Server-Side Request Forgery (SSRF) in Apache Batik (Apache XML Graphics Batik) affecting version 1.16, where a crafted SVG could trigger loading external resources by default. This behavior can lead to resource consumption and potential information disclosure. The conne...

7.1CVSS6.7AI score0.00786EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2023/08/22 2:12 p.m.41 views

CVE-2022-44729

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even...

7.1CVSS6.5AI score0.00786EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/08/22 2:12 p.m.37 views

CVE-2022-44729 Apache XML Graphics Batik: Information disclosure vulnerability

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even...

7.2AI score0.00786EPSS
SaveExploits0References6
CVE
CVE
added 2023/08/22 1:57 p.m.147 views

CVE-2022-44730

CVE-2022-44730 is a Server-Side Request Forgery (SSRF) in Apache XML Graphics Batik (affected version: 1.16). A malicious SVG can probe user data and send it as a parameter to a URL; advisories (IBM bulletin, ALAS-2025-2801, Amazon Linux advisories) identify this alongside CVE-2022-44729 and reco...

4.4CVSS5.7AI score0.00749EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2023/08/22 1:57 p.m.33 views

CVE-2022-44730 Apache XML Graphics Batik: Information disclosure vulnerability

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL...

6.1AI score0.00749EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2023/08/22 1:57 p.m.43 views

CVE-2022-44730

Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL...

4.4CVSS6.2AI score0.00749EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/08/22 12:0 a.m.5 views

PT-2023-7021 · Apache +2 · Apache Xml Graphics Batik +2

Name of the Vulnerable Software and Affected Versions: Apache XML Graphics Batik version 1.16 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability in Apache XML Graphics Batik. This vulnerability can be exploited by a malicious SVG, which could trigger the loading...

8.2CVSS6.5AI score0.13635EPSS
SaveExploits1References70
CNNVD
CNNVD
added 2023/08/22 12:0 a.m.4 views

Apache XML Graphics Batik 代码问题漏洞

Apache XML Graphics Batik is a Java-based application from the Apache Foundation that is primarily used for processing SVG-format images. A code issue vulnerability exists in Apache XML Graphics Batik version 1.16, which stems from the presence of a Server Request Forgery SSRF vulnerability. An...

4.4CVSS6.5AI score0.00749EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/08/22 12:0 a.m.9 views

PT-2023-7054 · Apache +2 · Apache Xml Graphics Batik +2

Name of the Vulnerable Software and Affected Versions: Apache XML Graphics Batik version 1.16 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability in the Apache XML Graphics Batik library, which is used for working with SVG images. This vulnerability is caused by...

8.2CVSS6.5AI score0.13635EPSS
SaveExploits1References69
CNNVD
CNNVD
added 2023/08/22 12:0 a.m.6 views

Apache XML Graphics Batik 代码问题漏洞

Apache XML Graphics Batik is a suite of Java-based applications from the Apache Foundation that are primarily used for processing SVG-format images. A code issue vulnerability exists in Apache XML Graphics Batik version 1.16, which stems from the presence of a Server Request Forgery SSRF...

7.1CVSS6.8AI score0.00786EPSS
SaveExploits0References10
IBM Security Bulletins
IBM Security Bulletins
added 2023/07/13 10:57 a.m.45 views

Security Bulletin: The IBM® Engineering System Design Rhapsody products on IBM Jazz Technology contains additional security fixe for CVE-2022-40146, CVE-2022-38648, CVE-2022-38398 for batik-bridge-1.7.jar (Publicly disclosed vulnerability found by Mend)

Summary The IBM® Engineering System Design Rhapsody 9.0.1 iFix005 contains fix for CVE-2022-40146, CVE-2022-38648, CVE-2022-38398 batik-bridge-1.7.jar which is identified as a vulnerability during OSS scan. This version contains upgraded vresion of barik-bridge to batik-bridge-1.16.jar .jar...

7.5CVSS6AI score0.06134EPSS
SaveExploits1Affected Software1
RedHat Linux
RedHat Linux
added 2023/06/29 8:7 p.m.8 views

batik: Server-Side Request Forgery

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS7.3AI score0.02092EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2023/06/29 8:7 p.m.11 views

batik: Apache XML Graphics Batik vulnerable to code execution via SVG

A flaw was found in Batik. This issue may allow a malicious user to run untrusted Java code from an SVG...

7.5CVSS7.2AI score0.02346EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/06/29 8:7 p.m.7 views

batik: Server-Side Request Forgery

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS7.3AI score0.01997EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2023/06/29 8:7 p.m.11 views

batik: Untrusted code execution in Apache XML Graphics Batik

A flaw was found in Batik of Apache XML Graphics. This issue may allow a malicious user to run Java code from untrusted SVG via JavaScript...

7.5CVSS7.2AI score0.02541EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/06/29 8:7 p.m.11 views

batik: Server-Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14...

7.5CVSS7.3AI score0.06134EPSS
SaveExploits1References7
Rows per page
Query Builder