Поиск уязвимостей
Количество 7
Количество 7
GHSA-2h63-qp69-fwvw
Server-side request forgery (SSRF) in Apache Batik
CVE-2020-11987
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
CVE-2020-11987
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
CVE-2020-11987
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
CVE-2020-11987
Apache Batik 1.13 is vulnerable to server-side request forgery, caused ...
ALT-PU-2021-4963
ALT-PU-2021-4963: package `batik` update to version 1.14-alt1_1jpp8
SUSE-SU-2024:0777-1
Security update for xmlgraphics-batik
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-2h63-qp69-fwvw Server-side request forgery (SSRF) in Apache Batik | CVSS3: 8.2 | 14% Средний | почти 5 лет назад |
 | CVE-2020-11987 Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. | CVSS3: 8.2 | 14% Средний | больше 5 лет назад |
 | CVE-2020-11987 Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. | CVSS3: 8.2 | 14% Средний | больше 5 лет назад |
 | CVE-2020-11987 Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. | CVSS3: 8.2 | 14% Средний | больше 5 лет назад |
| CVE-2020-11987 Apache Batik 1.13 is vulnerable to server-side request forgery, caused ... | CVSS3: 8.2 | 14% Средний | больше 5 лет назад |
| ALT-PU-2021-4963 ALT-PU-2021-4963: package `batik` update to version 1.14-alt1_1jpp8 | CVSS3: 8.2 | 14% Средний | больше 5 лет назад |
 | SUSE-SU-2024:0777-1 Security update for xmlgraphics-batik | больше 2 лет назад |
Уязвимостей на страницу