PT-2022-24405 · Apache+5 · Apache Xml Graphics Batik+5
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Apache XML Graphics Batik version 1.14
Description
A Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik allows an attacker to load a URL through the jar protocol. This issue enables information disclosure.
Recommendations
For Apache XML Graphics Batik version 1.14, update to a version that fixes this issue to prevent exploitation. As a temporary workaround, consider restricting access to the jar protocol to minimize the risk of SSRF attacks.
Exploit
Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Xml Graphics Batik
Astra Linux
Debian
Linuxmint
Suse
Ubuntu