Количество 6
Количество 6
CVE-2020-11987
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
CVE-2020-11987
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
CVE-2020-11987
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
CVE-2020-11987
Apache Batik 1.13 is vulnerable to server-side request forgery, caused ...
GHSA-2h63-qp69-fwvw
Server-side request forgery (SSRF) in Apache Batik
SUSE-SU-2024:0777-1
Security update for xmlgraphics-batik
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-11987 Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. | CVSS3: 8.2 | 14% Средний | больше 5 лет назад |
 | CVE-2020-11987 Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. | CVSS3: 8.2 | 14% Средний | больше 5 лет назад |
 | CVE-2020-11987 Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. | CVSS3: 8.2 | 14% Средний | больше 5 лет назад |
| CVE-2020-11987 Apache Batik 1.13 is vulnerable to server-side request forgery, caused ... | CVSS3: 8.2 | 14% Средний | больше 5 лет назад |
| GHSA-2h63-qp69-fwvw Server-side request forgery (SSRF) in Apache Batik | CVSS3: 8.2 | 14% Средний | больше 4 лет назад |
 | SUSE-SU-2024:0777-1 Security update for xmlgraphics-batik | больше 2 лет назад |
Уязвимостей на страницу