GHSA-c5xv-qc8p-mh2vMediumCVSS 5.3

Apache Batik Server-Side Request Forgery

Published
September 23, 2022
Last Modified
November 3, 2025

🔗 CVE IDs covered (1)

CVE-2022-38398 →

📋 Description

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.

🎯 Affected products2

  • maven/org.apache.xmlgraphics:batik:>= 1.14, < 1.15
  • maven/org.apache.xmlgraphics:batik-bridge:>= 1.14, < 1.15

🔗 References (7)