Описание
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat build of Quarkus | batik | Will not fix | ||
| Red Hat Decision Manager 7 | batik | Out of support scope | ||
| Red Hat Integration Camel K 1 | batik | Affected | ||
| Red Hat Integration Camel Quarkus 1 | batik | Will not fix | ||
| Red Hat JBoss Data Grid 7 | batik | Out of support scope | ||
| Red Hat JBoss Fuse 6 | batik | Out of support scope | ||
| Red Hat JBoss Fuse Service Works 6 | batik | Out of support scope | ||
| Red Hat Process Automation 7 | batik | Out of support scope | ||
| Red Hat Fuse 7.12 | batik | Fixed | RHSA-2023:3954 | 29.06.2023 |
| RHINT Camel-Springboot 3.20.1 | batik | Fixed | RHSA-2023:2100 | 03.05.2023 |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-918
https://bugzilla.redhat.com/show_bug.cgi?id=2155295batik: Server-Side Request Forgery
EPSS
Процентиль: 78%
0.01954
Низкий
5.3 Medium
CVSS3
Связанные уязвимости
CVSS3: 5.3
ubuntu
почти 4 года назад
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.
CVSS3: 5.3
nvd
почти 4 года назад
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.
CVSS3: 5.3
debian
почти 4 года назад
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XM ...
CVSS3: 5.3
github
почти 4 года назад
Apache Batik vulnerable to Server-Side Request Forgery
EPSS
Процентиль: 78%
0.01954
Низкий
5.3 Medium
CVSS3