CVE-2022-42890

Name of the Vulnerable Software and Affected Versions Apache XML Graphics versions prior to 1.16 Confluence Data Center and Server versions 7.13.0 and 7.19.0

Description A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue is related to insufficient checking of incoming requests. The exploitation of this issue may allow a remote attacker to execute arbitrary Java code.

Recommendations For Apache XML Graphics versions prior to 1.16, upgrade to version 1.16. For Confluence Data Center and Server version 7.19, upgrade to a release greater than or equal to 7.19.16.