org.apache.xmlgraphics:batik-js vulnerabilities (TuxCare)

10 vulnerabilities.

• org.apache.xmlgraphics:batik-js TuxCare Apache XML Graphics Batik: Information disclosure vulnerability CVE-2022-44729 Fix available 7.1 HighAugust 22, 2023
• org.apache.xmlgraphics:batik-js TuxCare Apache Batik prior to 1.16 allows RCE via scripting CVE-2022-42890 Fix available 7.5 HighOctober 25, 2022
• org.apache.xmlgraphics:batik-js TuxCare Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input CVE-2022-41704 Fix available 7.5 HighOctober 25, 2022
• org.apache.xmlgraphics:batik-js TuxCare Jar url should be blocked by DefaultScriptSecurity CVE-2022-40146 Public exploitFix available 7.5 HighSeptember 22, 2022
• org.apache.xmlgraphics:batik-js TuxCare PDFTranscoder does not block external resources CVE-2022-38648 Fix available 5.3 MediumSeptember 22, 2022
• org.apache.xmlgraphics:batik-js TuxCare Server-side request forgery (SSRF) in Apache Batik CVE-2020-11987 Fix available EPSS 13.6% 8.2 HighFebruary 24, 2021
• org.apache.xmlgraphics:batik-js TuxCare Server-side request forgery (SSRF) in Apache Batik CVE-2019-17566 Fix available EPSS 10.9% 7.5 HighJune 22, 2020
• org.apache.xmlgraphics:batik-js TuxCare Deserialization of Untrusted Data in Apache Batik CVE-2018-8013 Fix available EPSS 18.6% 9.8 CriticalMay 23, 2018
• org.apache.xmlgraphics:batik-js TuxCare Improper Restriction of XML External Entity Reference in Apache Batik CVE-2017-5662 Fix available 7.3 HighApril 18, 2017
• org.apache.xmlgraphics:batik-js TuxCare Improper Input Validation in Apache Batik CVE-2015-0250 Fix available EPSS 16.6% 6.4 MediumMarch 18, 2015