batik · threatengine.sh

CVE-2022-42890

>= 1.0 and < 1.16

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue

7.5HIGH

CVE-2022-41704

>= 1.0 and < 1.16

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apac

7.5HIGH

CVE-2022-40146

all versions

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar ur

7.5HIGH

CVE-2022-38648

all versions

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. T

5.3MEDIUM

CVE-2022-38398

all versions

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar pro

5.3MEDIUM

CVE-2020-11987

<= 1.13

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By usi

8.2HIGH

CVE-2019-17566

< 1.13

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By

7.5HIGH

CVE-2018-8013

>= 1.0 and < 1.10

In Apache Batik 1.x before 1.10, when deserializing subclass of AbstractDocument, the class takes a string from the inputStream

9.8CRITICAL

CVE-2017-5662

<= 1.8

In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who se

7.3HIGH

CVE-2015-0250

<= 1.7

XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows

apache batik