org.apache.xmlgraphics:batik vulnerabilities (Maven)

9 vulnerabilities.

• org.apache.xmlgraphics:batik Maven Apache Batik prior to 1.16 allows RCE via scripting CVE-2022-42890 Fix available 7.5 HighOctober 25, 2022
• org.apache.xmlgraphics:batik Maven Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input CVE-2022-41704 Fix available 7.5 HighOctober 25, 2022
• org.apache.xmlgraphics:batik Maven Jar url should be blocked by DefaultScriptSecurity CVE-2022-40146 Public exploitFix available 7.5 HighSeptember 22, 2022
• org.apache.xmlgraphics:batik Maven PDFTranscoder does not block external resources CVE-2022-38648 Fix available 5.3 MediumSeptember 22, 2022
• org.apache.xmlgraphics:batik Maven Server-Side Request Forgery Information Disclosure Vulnerability CVE-2022-38398 Fix available 5.3 MediumSeptember 22, 2022
• org.apache.xmlgraphics:batik Maven Server-side request forgery (SSRF) in Apache Batik CVE-2019-17566 Fix available EPSS 10.9% 7.5 HighJune 22, 2020
• org.apache.xmlgraphics:batik Maven Deserialization of Untrusted Data in Apache Batik CVE-2018-8013 Fix available EPSS 18.6% 9.8 CriticalMay 23, 2018
• org.apache.xmlgraphics:batik Maven Improper Restriction of XML External Entity Reference in Apache Batik CVE-2017-5662 Fix available 7.3 HighApril 18, 2017
• org.apache.xmlgraphics:batik Maven Improper Input Validation in Apache Batik CVE-2015-0250 Fix available EPSS 16.6% 6.4 MediumMarch 18, 2015