| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.xmlgraphics:batik-script | ≥ 1.0, < 1.17 | 1.17 |
| xml graphics batik | ≥ 1.0, ≤ 1.16 |
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.
A malicious SVG can probe user profile / data and send it directly as parameter to a URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free