| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.xmlgraphics:batik | ≥ 1.14, < 1.15 | 1.15 |
| org.apache.xmlgraphics:batik-bridge | ≥ 1.14, < 1.15 | 1.15 |
| batik | = 1.14 |
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free