Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1800-1

Опубликовано: 30 июн. 2020
Источник: suse-cvrf

Описание

Security update for xmlgraphics-batik

This update for xmlgraphics-batik fixes the following issues:

  • CVE-2019-17566: Fixed a SSRF which might have allowed the underlying server to make arbitrary GET requests (bsc#1172961).

Список пакетов

SUSE Linux Enterprise Software Development Kit 12 SP4
xmlgraphics-batik-1.8-3.3.1
SUSE Linux Enterprise Software Development Kit 12 SP5
xmlgraphics-batik-1.8-3.3.1

Ссылки

Описание

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP4:xmlgraphics-batik-1.8-3.3.1
SUSE Linux Enterprise Software Development Kit 12 SP5:xmlgraphics-batik-1.8-3.3.1
Ссылки