CVE-2020-11987

Name of the Vulnerable Software and Affected Versions Apache Batik version 1.13

Description The issue is caused by improper input validation by the NodePickerPanel, allowing an attacker to exploit the vulnerability and cause the underlying server to make arbitrary GET requests. This can be achieved by using a specially-crafted argument.

Recommendations For Apache Batik version 1.13, consider disabling the NodePickerPanel functionality until a patch is available to prevent exploitation. Restrict access to the vulnerable component to minimize the risk of arbitrary GET requests being made by the underlying server.