org.apache.xmlgraphics:batik-extensions vulnerabilities (TuxCare)

10 vulnerabilities.

• org.apache.xmlgraphics:batik-extensions TuxCare Apache XML Graphics Batik: Information disclosure vulnerability CVE-2022-44729 Fix available 7.1 HighAugust 22, 2023
• org.apache.xmlgraphics:batik-extensions TuxCare Apache Batik prior to 1.16 allows RCE via scripting CVE-2022-42890 Fix available 7.5 HighOctober 25, 2022
• org.apache.xmlgraphics:batik-extensions TuxCare Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input CVE-2022-41704 Fix available 7.5 HighOctober 25, 2022
• org.apache.xmlgraphics:batik-extensions TuxCare Jar url should be blocked by DefaultScriptSecurity CVE-2022-40146 Public exploitFix available 7.5 HighSeptember 22, 2022
• org.apache.xmlgraphics:batik-extensions TuxCare PDFTranscoder does not block external resources CVE-2022-38648 Fix available 5.3 MediumSeptember 22, 2022
• org.apache.xmlgraphics:batik-extensions TuxCare Server-side request forgery (SSRF) in Apache Batik CVE-2020-11987 Fix available EPSS 13.6% 8.2 HighFebruary 24, 2021
• org.apache.xmlgraphics:batik-extensions TuxCare Server-side request forgery (SSRF) in Apache Batik CVE-2019-17566 Fix available EPSS 10.9% 7.5 HighJune 22, 2020
• org.apache.xmlgraphics:batik-extensions TuxCare Deserialization of Untrusted Data in Apache Batik CVE-2018-8013 Fix available EPSS 18.6% 9.8 CriticalMay 23, 2018
• org.apache.xmlgraphics:batik-extensions TuxCare Improper Restriction of XML External Entity Reference in Apache Batik CVE-2017-5662 Fix available 7.3 HighApril 18, 2017
• org.apache.xmlgraphics:batik-extensions TuxCare Improper Input Validation in Apache Batik CVE-2015-0250 Fix available EPSS 16.6% 6.4 MediumMarch 18, 2015