CVE-2020-11988

Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser

published February 24, 2021

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. Users should upgrade to 2.6 or later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06650 · 93.9th percentile
Published
2021-02-24T17:05Z
EPSS history
Timeline
  • 24 FEB 17:05Z
    Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser
    cvelistv5