Lucene search
+L

151 matches found

OSV
OSV
added 2022/10/25 5:15 p.m.6 views

UBUNTU-CVE-2022-42890

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16...

7.5CVSS7.1AI score0.0232EPSS
SaveExploits0References8
OSV
OSV
added 2022/10/25 5:15 p.m.5 views

UBUNTU-CVE-2022-41704

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16...

7.5CVSS7.1AI score0.02143EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2022/10/25 12:0 a.m.28 views

CVE-2022-42890 Apache Batik prior to 1.16 allows RCE via scripting

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16...

7.8AI score0.0232EPSS
SaveExploits0References5
CVE
CVE
added 2022/10/25 12:0 a.m.235 views

CVE-2022-42890

CVE-2022-42890 is a vulnerability in Apache Batik (XML Graphics Project) that allows an attacker to run arbitrary Java code from untrusted SVG via JavaScript. The issue affects Apache Batik prior to version 1.16; multiple advisories note upgrading to 1.16 or newer as the remediation (e.g., Debian...

7.5CVSS7.5AI score0.0232EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2022/10/25 12:0 a.m.201 views

CVE-2022-41704

CVE-2022-41704 concerns the Apache Batik library (Apache XML Graphics) and allows a remote attacker to run untrusted Java code from an SVG. The issue affects Batik versions prior to 1.16, with a recommended upgrade to 1.16. Connected documents corroborate the vulnerability details across multiple...

7.5CVSS7.5AI score0.02143EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
added 2022/10/25 12:0 a.m.4 views

Apache XML Graphics Batik 代码问题漏洞

Apache XML Graphics Batik is a suite of Java-based applications from the Apache Foundation that are primarily used to process images in SVG format. A security vulnerability exists in versions of Apache XML Graphics prior to 1.16 that stems from a problem with Batik that allows an attacker to run...

7.5CVSS7.5AI score0.0232EPSS
SaveExploits0References11
OSV
OSV
added 2022/10/25 12:0 a.m.32 views

CVE-2022-41704 Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16...

7.5CVSS7AI score0.02143EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2022/10/25 12:0 a.m.4 views

PT-2022-5346 · Atlassian +6 · Confluence +8

Name of the Vulnerable Software and Affected Versions: Apache XML Graphics versions prior to 1.16 Confluence Data Center and Server versions 7.13.0 through 7.19.0, specifically versions prior to 7.19.16 Description: A vulnerability in the Apache Batik library for working with SVG images is relate...

8.2CVSS6.9AI score0.13635EPSS
SaveExploits1References95
OSV
OSV
added 2022/10/25 12:0 a.m.34 views

CVE-2022-42890 Apache Batik prior to 1.16 allows RCE via scripting

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16...

7.5CVSS7.1AI score0.0232EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2022/10/25 12:0 a.m.30 views

CVE-2022-41704 Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16...

7.8AI score0.02143EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2022/10/25 12:0 a.m.51 views

CVE-2022-42890

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16...

7.5CVSS7.6AI score0.0232EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2022/10/25 12:0 a.m.46 views

CVE-2022-41704

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16...

7.5CVSS7.5AI score0.02143EPSS
SaveExploits0
CNVD
CNVD
added 2022/09/26 12:0 a.m.143 views

Apache XML Graphics Batik Server-Side Request Forgery Vulnerability

Apache XML Graphics Batik is a Java-based application from the Apache Foundation that is primarily used to process images in SVG format.Apache XML Graphics Batik is vulnerable to server-side request forgery, which is caused by a flaw in the DefaultScriptSecurity function. An attacker could exploi...

1.9AI score0.06134EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2022/09/26 12:0 a.m.36 views

Apache XML Graphics Batik Server-Side Request Forgery Vulnerability (CNVD-2022-73693)

Apache XML Graphics Batik is a Java-based application from the Apache Foundation that is primarily used to process images in SVG format.A server-side request forgery vulnerability exists in Apache XML Graphics Batik due to a flaw in the A flaw in the DefaultExternalResourceSecurity function cause...

2.4AI score0.02092EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
added 2022/09/23 12:0 a.m.33 views

Apache Batik vulnerable to Server-Side Request Forgery

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14...

7.5CVSS7.5AI score0.06134EPSS
SaveExploits1References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/09/23 12:0 a.m.32 views

Apache Batik vulnerable to Server-Side Request Forgery

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik Bridge versions 1.14 and below...

5.3CVSS6.3AI score0.01997EPSS
SaveExploits0References8Affected Software2
OSV
OSV
added 2022/09/23 12:0 a.m.7 views

GHSA-C5XV-QC8P-MH2V Apache Batik Server-Side Request Forgery

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS7.1AI score0.02092EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/09/23 12:0 a.m.46 views

Apache Batik Server-Side Request Forgery

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS6.3AI score0.02092EPSS
SaveExploits0References7Affected Software2
NVD
NVD
added 2022/09/22 3:15 p.m.27 views

CVE-2022-38398

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS0.02092EPSS
SaveExploits0References4
OSV
OSV
added 2022/09/22 3:15 p.m.2 views

DEBIAN-CVE-2022-40146

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14...

7.5CVSS7.5AI score0.06134EPSS
SaveExploits1References1
Rows per page
Query Builder