Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-38648

Опубликовано: 22 сент. 2022
Источник: debian

Описание

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
batikfixed1.15+dfsg-1package

Примечания

  • https://www.openwall.com/lists/oss-security/2022/09/22/4

  • https://issues.apache.org/jira/browse/BATIK-1333

  • http://svn.apache.org/viewvc?view=revision&revision=1903625

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 4 года назад

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.

CVSS3: 5.3
redhat
почти 4 года назад

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.

CVSS3: 5.3
nvd
почти 4 года назад

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.

CVSS3: 5.3
github
почти 4 года назад

Apache Batik vulnerable to Server-Side Request Forgery

suse-cvrf
больше 2 лет назад

Security update for xmlgraphics-batik