CVE-2022-44730

CVSS V2 None CVSS V3 None
Description
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL.
Overview
  • CVE ID
  • CVE-2022-44730
  • Assigner
  • apache
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-08-22T13:57:00.282Z
  • Last Modified Date
  • 2023-08-22T14:04:27.413Z
Weakness Enumerations
CWE URL
CWE-918 http://cwe.mitre.org/data/definitions/918.html
References
Reference URL Reference Tags
https://lists.apache.org/thread/58m5817jr059f4v1zogh0fngj9pwjyj0 vendor-advisory
https://xmlgraphics.apache.org/security.html
http://www.openwall.com/lists/oss-security/2023/08/22/3
http://www.openwall.com/lists/oss-security/2023/08/22/5
https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html
https://security.gentoo.org/glsa/202401-11
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-44730
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44730
History
Created Old Value New Value Data Type Notes
2024-06-24 18:00:14 Added to TrackCVE