CVE-2022-44730CWE-918

Apache XML Graphics Batik: Information disclosure vulnerability

published August 22, 2023

CVSS
—
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.

A malicious SVG can probe user profile / data and send it directly as parameter to a URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00876 · 58.6th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2023-08-22T13:57Z
EPSS history
Timeline
  • 22 AUG 13:57Z
    Apache XML Graphics Batik: Information disclosure vulnerability
    cvelistv5