Описание
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat build of Quarkus | batik | Will not fix | ||
| Red Hat Decision Manager 7 | batik | Out of support scope | ||
| Red Hat Integration Camel K 1 | batik | Affected | ||
| Red Hat Integration Camel Quarkus 1 | batik | Will not fix | ||
| Red Hat JBoss Data Grid 7 | batik | Out of support scope | ||
| Red Hat JBoss Fuse 6 | batik | Out of support scope | ||
| Red Hat JBoss Fuse Service Works 6 | batik | Out of support scope | ||
| Red Hat Process Automation 7 | batik | Out of support scope | ||
| Red Hat Fuse 7.12 | batik | Fixed | RHSA-2023:3954 | 29.06.2023 |
| RHINT Camel-Springboot 3.20.1 | batik | Fixed | RHSA-2023:2100 | 03.05.2023 |
Показывать по
Дополнительная информация
Статус:
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XM ...
ALT-PU-2026-9117: package `batik` update to version 1.19-alt1
EPSS
5.3 Medium
CVSS3