VULNERABILITY INTELLIGENCE
CVE-2022-44730
CVSS score4.4 MEDIUM
EPSS probability0.88%
CISA KEVNot currently listed
Published2023-08-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Description
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL.
Weakness classification
- security@apache.org: CWE-918
Primary references
- security@apache.org — Mailing List, Third Party Advisory
- security@apache.org — Mailing List, Third Party Advisory
- security@apache.org — Mailing List, Vendor Advisory
- security@apache.org — Mailing List
- security@apache.org
- security@apache.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory