apache xml graphics batik vulnerabilities and exploits

(subscribe to this query)

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in so...

Apache Xml Graphics Batik Debian Debian Linux 10.0

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL.

Apache Xml Graphics Batik Debian Debian Linux 10.0

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an malicious user to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.

Apache Batik 1.14 Debian Debian Linux 10.0

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an malicious user to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.

Apache Batik 1.14 Debian Debian Linux 10.0

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an malicious user to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.

Apache Batik 1.14 Debian Debian Linux 10.0

A vulnerability in Batik of Apache XML Graphics allows an malicious user to run untrusted Java code from an SVG. This issue affects Apache XML Graphics before 1.16. It is recommended to update to version 1.16.

Apache Batik Debian Debian Linux 10.0 Debian Debian Linux 11.0

A vulnerability in Batik of Apache XML Graphics allows an malicious user to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics before 1.16. Users are recommended to upgrade to version 1.16.

Apache Batik Debian Debian Linux 10.0 Debian Debian Linux 11.0

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

1 Github repository

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET reques...

Apache Batik Oracle Api Gateway 11.1.2.4.0 Oracle Hyperion Financial Reporting 11.1.2.4 Oracle Enterprise Repository 11.1.1.7.0 Oracle Business Intelligence 12.2.1.3.0 Oracle Retail Order Broker 15.0 Oracle Retail Order Broker 16.0 Oracle Retail Returns Management 14.1 Oracle Retail Point-of-service 14.1 Oracle Business Intelligence 12.2.1.4.0 Oracle Business Intelligence 5.5.0.0.0 Oracle Financial Services Analytical Applications Infrastructure Oracle Fusion Middleware Mapviewer 12.2.1.4.0 Oracle Instantis Enterprisetrack Oracle Communications Offline Mediation Controller 12.0.0.3.0 Oracle Retail Integration Bus 15.0.3 Oracle Communications Application Session Controller 3.9m0p2 Oracle Hospitality Opera 5 5.5 Oracle Hospitality Opera 5 5.6 Oracle Business Intelligence 5.9.0.0.0 Oracle Retail Order Management System Cloud Service 19.5 Oracle Jd Edwards Enterpriseone Tools

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook