Improper Input Validation in Apache Batik

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2015-0250 · ADVISORY
• advisories.mageia.org/MGASA-2015-0138.html · WEB
• packetstormsecurity.com/files/130964/Apache-Batik-XXE-Injection.html · WEB
• rhn.redhat.com/errata/RHSA-2016-0041.html · WEB
• rhn.redhat.com/errata/RHSA-2016-0042.html · WEB
• seclists.org/fulldisclosure/2015/Mar/142 · WEB
• www-01.ibm.com/support/docview.wss · WEB
• debian.org/security/2015/dsa-3205 · WEB
• mandriva.com/security/advisories · WEB
• securitytracker.com/id/1032781 · WEB
• ubuntu.com/usn/USN-2548-1 · WEB
• xmlgraphics.apache.org/security.html · WEB

Lỗ hổng khác của org.apache.xmlgraphics:batik

• CVE-2022-42890CAO 7.5A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Ap…
• CVE-2022-41704CAO 7.5A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Gra…
• CVE-2022-40146CAO 7.5Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This is…
• CVE-2022-38648TRUNG BÌNH 5.3Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue …
• CVE-2022-38398TRUNG BÌNH 5.3Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. Thi…