Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-38398

Опубликовано: 22 сент. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.3

Описание

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.

РелизСтатусПримечание
bionic

released

1.10-2~18.04.1
devel

needs-triage

esm-apps-legacy/xenial

released

1.8-3ubuntu1+esm1
esm-apps/bionic

released

1.10-2~18.04.1
esm-apps/focal

released

1.12-1ubuntu0.1
esm-apps/jammy

released

1.14-1ubuntu0.2
esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

esm-apps/xenial

released

1.8-3ubuntu1+esm1
esm-infra-legacy/trusty

DNE

trusty/esm was released [1.7.ubuntu-8ubuntu2.14.04.3+esm1]

Показывать по

EPSS

Процентиль: 81%
0.02135
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
redhat
почти 4 года назад

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.

CVSS3: 5.3
nvd
почти 4 года назад

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.

CVSS3: 5.3
debian
почти 4 года назад

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XM ...

CVSS3: 5.3
github
почти 4 года назад

Apache Batik Server-Side Request Forgery

suse-cvrf
больше 2 лет назад

Security update for xmlgraphics-batik

EPSS

Процентиль: 81%
0.02135
Низкий

5.3 Medium

CVSS3