Lucene search
China National Vulnerability DatabaseCNVD-2022-73690HistorySep 26, 2022 - 12:00 a.m.
Apache XML Graphics Batik Server-Side Request Forgery Vulnerability (CNVD-2022-73690)
2022-09-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
21
apache
xml
graphics
batik
ssrf
java
apache foundation
svg
vulnerable
server-side request forgery
flaw
fop
exploit
external resources
cnvd-2022-73690
EPSS
0.001
Percentile
51.4%
Apache XML Graphics Batik is a Java-based application from the Apache Foundation that is primarily used to process images in SVG format. Apache XML Graphics Batik is vulnerable to server-side request forgery, which is caused by a flaw when calling the fop function. An attacker could exploit the vulnerability to conduct an SSRF attack to obtain external resources.
Related
nvd
nvd
CVE-2022-38648
2022-09-22 15:15:09
redhatcve
redhatcve
CVE-2022-38648
2022-12-20 17:05:08
ubuntucve
ubuntucve
CVE-2022-38648
2022-09-22 00:00:00
osv
osv
Apache Batik vulnerable to Server-Side Request Forgery
2022-09-23 00:00:40
CVE-2022-38648
2022-09-22 15:15:09
batik - security update
2023-10-14 00:00:00
prion
prion
Server side request forgery (ssrf)
2022-09-22 15:15:00
debiancve
debiancve
CVE-2022-38648
2022-09-22 15:15:09
cve
cve
CVE-2022-38648
2022-09-22 15:15:09
github
github
Apache Batik vulnerable to Server-Side Request Forgery
2022-09-23 00:00:40
veracode
veracode
Server-Side Request Forgery
2022-09-26 11:37:26
cvelist
cvelist
CVE-2022-38648 PDFTranscoder does not block external resources
2022-09-22 00:00:00
ibm
ibm
Security Bulletin: There are several vulnerabilities in Apache Batik used by IBM Jazz Reporting Service (CVE-2022-40146, CVE-2022-38648, CVE-2022-38398)
2023-10-04 10:44:16
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0068)
2024-03-18 00:00:00
Debian: Security Advisory (DLA-3619-1)
2023-10-16 00:00:00
Ubuntu: Security Advisory (USN-6117-1)
2023-05-31 00:00:00
mageia
mageia
Updated batik packages fix security vulnerabilities
2024-03-16 19:28:17
nessus
nessus
Amazon Linux 2 : batik (ALAS-2023-1966)
2023-03-07 00:00:00
Amazon Linux AMI : batik (ALAS-2023-1695)
2023-03-07 00:00:00
Debian DLA-3619-1 : batik - LTS security update
2023-10-14 00:00:00
amazon
amazon
Important: batik
2023-03-02 21:49:00
Important: batik
2023-03-02 20:21:00
debian
debian
[SECURITY] [DLA 3619-1] batik security update
2023-10-14 22:16:33
ubuntu
ubuntu
Apache Batik vulnerabilities
2023-05-30 00:00:00
gentoo
gentoo
Apache Batik: Multiple Vulnerabilities
2024-01-07 00:00:00
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00