Apache XML Graphics vulnerabilities

3 known vulnerabilities in Apache XML Graphics from Apache. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache XML Graphics: Server-Side Request Forgery

  CVE-2022-42890Oct 25, 2022ApacheEPSS 3.38%

  A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

• 7.5 High severity

  Apache XML Graphics: Server-Side Request Forgery

  CVE-2022-41704Oct 25, 2022ApacheEPSS 3.12%

  A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16.

• 7.5 High severity

  Apache XML Graphics: Server-Side Request Forgery

  CVE-2022-40146Sep 22, 2022ApacheEPSS 7.43%

  Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.