CVE-2019-17566

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes

published November 12, 2020

CVSS

—

EPSS

11%

Percentile

95.9

In the wild

Unconfirmed

What it is

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.10867 · 95.9th percentile
Published: 2020-11-12T00:00Z

EPSS history

Timeline

12 NOV 00:00Z
Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes
cvelistv5