Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-CMX4-P4V5-HMR5
HistoryFeb 09, 2022 - 12:46 a.m.

Server-side request forgery (SSRF) in Apache Batik

2022-02-0900:46:46
Google
osv.dev
49
apache batik
vulnerability
ssrf
input validation
get requests

EPSS

0.002

Percentile

53.4%

JSON

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the “xlink:href” attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

References

Related

ibm 38
nessus 11
nvd 1
cvelist 1
debiancve 1
ubuntucve 1
redhatcve 1
suse 2
cve 1
veracode 1
openvas 18
github 1
osv 3
prion 1
fedora 15
mageia 1
rosalinux 1
ubuntu 1
gentoo 1
redhat 3
oracle 6
ibm
ibm
Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to CVE-2019-17566
2020-11-10 14:05:35
Security Bulletin: Vulnerability in Apache Batik affects WebSphere Application Server (CVE-2019-17566)
2020-08-25 21:46:45
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2019-17566)
2020-08-27 07:16:21
nessus
nessus
openSUSE Security Update : xmlgraphics-batik (openSUSE-2020-851)
2020-07-20 00:00:00
IBM WebSphere Application Server 8.0.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.18 / 9.0.x < 9.0.5.5 SSRF (CVE-2019-17566)
2020-10-30 00:00:00
Fedora 32 : 1:ecj / 1:eclipse / 1:eclipse-emf / 2:eclipse-cdt / batik / etc (2020-cf8ef2f333)
2020-09-01 00:00:00
nvd
nvd
CVE-2019-17566
2020-11-12 18:15:12
cvelist
cvelist
CVE-2019-17566
2020-11-12 00:00:00
debiancve
debiancve
CVE-2019-17566
2020-11-12 18:15:12
ubuntucve
ubuntucve
CVE-2019-17566
2020-11-12 00:00:00
redhatcve
redhatcve
CVE-2019-17566
2020-06-18 15:55:19
suse
suse
Security update for xmlgraphics-batik (moderate)
2020-06-23 00:00:00
Security update for xmlgraphics-batik (moderate)
2020-07-23 00:00:00
cve
cve
CVE-2019-17566
2020-11-12 18:15:12
veracode
veracode
Server-side Request Forgery (SSRF)
2020-06-16 09:19:33
openvas
openvas
openSUSE: Security Advisory for xmlgraphics-batik (openSUSE-SU-2020:0851-1)
2020-06-23 00:00:00
Fedora: Security Advisory for ecj (FEDORA-2020-cf8ef2f333)
2020-09-02 00:00:00
Fedora: Security Advisory for eclipse-cdt (FEDORA-2020-cf8ef2f333)
2020-09-02 00:00:00
github
github
Server-side request forgery (SSRF) in Apache Batik
2022-02-09 00:46:46
osv
osv
xmlgraphics-batik-1.14-2.5 on GA media
2024-06-15 00:00:00
CVE-2019-17566
2020-11-12 18:15:12
batik vulnerabilities
2023-05-30 14:31:05
prion
prion
Server side request forgery (ssrf)
2020-11-12 18:15:00
fedora
fedora
[SECURITY] Fedora 32 Update: eclipse-cdt-9.11.1-8.fc32
2020-08-31 15:50:28
[SECURITY] Fedora 32 Update: ecj-4.16-4.fc32
2020-08-31 15:50:28
[SECURITY] Fedora 32 Update: eclipse-mylyn-3.25.0-3.fc32
2020-08-31 15:50:29
mageia
mageia
Updated batik packages fix security vulnerabilities
2021-04-02 23:25:05
rosalinux
rosalinux
Advisory ROSA-SA-2023-2239
2023-10-10 08:57:57
ubuntu
ubuntu
Apache Batik vulnerabilities
2023-05-30 00:00:00
gentoo
gentoo
Apache Batik: Multiple Vulnerabilities
2024-01-07 00:00:00
redhat
redhat
(RHSA-2020:4960) Moderate: Red Hat Decision Manager 7.9.0 security update
2020-11-05 18:43:06
(RHSA-2020:4961) Moderate: Red Hat Process Automation Manager 7.9.0 security update
2020-11-05 18:44:42
(RHSA-2020:5568) Important: Red Hat Fuse 7.8.0 release and security update
2020-12-16 12:07:05
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00

EPSS

0.002

Percentile

53.4%

JSON
Related for OSV:GHSA-CMX4-P4V5-HMR5
ibm38nessus11nvd1cvelist1debiancve1ubuntucve1redhatcve1suse2cve1veracode1openvas18github1osv3prion1fedora15mageia1rosalinux1ubuntu1gentoo1redhat3oracle6