VULNERABILITY INTELLIGENCE
CVE-2022-44729
CVSS score7.1 HIGH
EPSS probability0.92%
CISA KEVNot currently listed
Published2023-08-22
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Description
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.
Weakness classification
- CWE-918: Server-Side Request Forgery (SSRF)
Primary references
- security@apache.org — Mailing List, Third Party Advisory
- security@apache.org — Mailing List, Third Party Advisory
- security@apache.org — Mailing List, Vendor Advisory
- security@apache.org — Mailing List
- security@apache.org
- security@apache.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory