Lucene search

K
osvGoogleOSV:CVE-2019-17566
HistoryNov 12, 2020 - 6:15 p.m.

CVE-2019-17566

2020-11-1218:15:12
Google
osv.dev
6

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.5%

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the โ€œxlink:hrefโ€ attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.