GHSA-h4qg-p7r2-cpg3HighCVSS 7.5

Apache Batik vulnerable to Server-Side Request Forgery

Published
September 23, 2022
Last Modified
November 3, 2025

🔗 CVE IDs covered (1)

CVE-2022-40146 →

📋 Description

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.

🎯 Affected products1

  • maven/org.apache.xmlgraphics:batik:>= 1.0, < 1.15

🔗 References (7)