batik vulnerabilities (Mageia)

8 vulnerabilities.

• batik Mageia Apache Batik prior to 1.16 allows RCE via scripting CVE-2022-42890 Fix available 7.5 HighOctober 25, 2022
• batik Mageia Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input CVE-2022-41704 Fix available 7.5 HighOctober 25, 2022
• batik Mageia Jar url should be blocked by DefaultScriptSecurity CVE-2022-40146 Public exploitFix available 7.5 HighSeptember 22, 2022
• batik Mageia PDFTranscoder does not block external resources CVE-2022-38648 Fix available 5.3 MediumSeptember 22, 2022
• batik Mageia Server-Side Request Forgery Information Disclosure Vulnerability CVE-2022-38398 Fix available 5.3 MediumSeptember 22, 2022
• batik Mageia Server-side request forgery (SSRF) in Apache Batik CVE-2020-11987 Fix available EPSS 13.6% 8.2 HighFebruary 24, 2021
• batik Mageia Server-side request forgery (SSRF) in Apache Batik CVE-2019-17566 Fix available EPSS 10.9% 7.5 HighJune 22, 2020
• batik Mageia Improper Input Validation in Apache Batik CVE-2015-0250 Fix available EPSS 16.6% 6.4 MediumMarch 18, 2015