Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-42890

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-rwqr-m72q-v6cm

Untrusted code execution in Apache XML Graphics Batik A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

gitlab/maven/org.apache.xmlgraphics/batik-bridge/CVE-2022-42890

Untrusted code execution in Apache XML Graphics Batik A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

gitlab/maven/org.apache.xmlgraphics/batik/CVE-2022-42890

Untrusted code execution in Apache XML Graphics Batik A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

gitlab/maven/org.apache.xmlgraphics/batik-dom/CVE-2022-42890

Server-Side Request Forgery (SSRF) A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

gitlab/maven/org.apache.xmlgraphics/batik-rasterizer/CVE-2022-42890

Server-Side Request Forgery (SSRF) A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

gitlab/maven/org.apache.xmlgraphics/batik-script/CVE-2022-42890

Untrusted code execution in Apache XML Graphics Batik A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

gitlab/maven/org.apache.xmlgraphics/batik-svgbrowser/CVE-2022-42890

Server-Side Request Forgery (SSRF) A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.