Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-E4D33C7640351F56D161E8D06E68C248HistoryMar 24, 2015 - 12:00 a.m.
Improper Restriction of XML External Entity Reference
2015-03-2400:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
14
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
0.043 Low
EPSS
Percentile
92.3%
XML external entity (XXE) vulnerability in the SVG to PNG and JPG conversion classes in Apache Batik allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.
Affected configurations
Node
mavenbatik-transcoderRange≤1.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| maven/batik/batik-transcoder | le | 1.7 |
Related
osv
osv
Improper Input Validation in Apache Batik
2022-05-17 00:28:34
ubuntu
ubuntu
Batik vulnerability
2015-03-25 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-182-1)
2023-03-08 00:00:00
Fedora Update for batik FEDORA-2015-8783
2015-06-09 00:00:00
Mageia: Security Advisory (MGASA-2015-0138)
2022-01-28 00:00:00
ibm
ibm
nessus
nessus
Ubuntu 14.04 LTS : Batik vulnerability (USN-2548-1)
2015-03-26 00:00:00
Fedora 21 : batik-1.8-0.18.svn1230816.fc21 (2015-8783)
2015-06-05 00:00:00
Mandriva Linux Security Advisory : batik (MDVSA-2015:203)
2015-04-13 00:00:00
redhat
redhat
(RHSA-2016:0042) Moderate: Red Hat JBoss BPM Suite 6.1.5 update
2016-01-14 18:31:13
(RHSA-2016:0041) Moderate: Red Hat JBoss BRMS 6.1.5 update
2016-01-14 18:31:11
(RHSA-2015:2560) Critical: Red Hat JBoss BPM Suite 6.2.0 update
2015-12-07 20:42:58
securityvulns
securityvulns
Apache libbatik XXE
2015-05-11 00:00:00
[USN-2548-1] Batik vulnerability
2015-05-11 00:00:00
nvd
nvd
CVE-2015-0250
2015-03-24 17:59:00
prion
prion
Xxe
2015-03-24 17:59:00
archlinux
archlinux
java-batik: xml external entity injection
2015-04-04 00:00:00
debiancve
debiancve
CVE-2015-0250
2015-03-24 17:59:00
fedora
fedora
[SECURITY] Fedora 20 Update: batik-1.8-0.12.svn1230816.fc20
2015-06-04 20:19:41
[SECURITY] Fedora 21 Update: batik-1.8-0.18.svn1230816.fc21
2015-06-04 20:20:52
[SECURITY] Fedora 22 Update: batik-1.8-0.18.svn1230816.fc22
2015-06-04 20:11:57
mageia
mageia
Updated batik packages fix security vulnerabilities
2015-04-10 01:44:14
veracode
veracode
XML External Entity (XXE) Injection
2017-04-13 02:00:52
debian
debian
[SECURITY] [DSA 3205-1] batik security update
2015-03-27 10:59:52
[SECURITY] [DLA 182-1] batik security update
2015-03-27 21:16:06
[SECURITY] [DSA 3205-1] batik security update
2015-03-27 10:59:52
github
github
Improper Input Validation in Apache Batik
2022-05-17 00:28:34
ubuntucve
ubuntucve
CVE-2015-0250
2015-03-18 00:00:00
cvelist
cvelist
CVE-2015-0250
2015-03-24 17:00:00
cve
cve
CVE-2015-0250
2015-03-24 17:59:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2017
2017-01-17 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
0.043 Low
EPSS
Percentile
92.3%
Related for GITLAB-E4D33C7640351F56D161E8D06E68C248