Product

org.apache.xmlgraphics/batik-script vulnerabilities

1 published CVE affecting org.apache.xmlgraphics/batik-script, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.apache.xmlgraphics/batik-script CVEs

Newest publication first

CVE-2022-44730 Apache XML Graphics Batik: Information disclosure vulnerability
Published 2023-08-22

MediumCVSS 4.4

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.apache.xmlgraphics/batik-script vulnerabilities

Latest org.apache.xmlgraphics/batik-script CVEs

CVE-2022-44730 Apache XML Graphics Batik: Information disclosure vulnerability