← back
CVE-2022-38648

PDFTranscoder does not block external resources

EPSS 1.9%CWE-918
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.
Affected products
Apache Software Foundation · Apache XML Graphics

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://lists.apache.org/thread/gfsktxvj7jtwyovmhhbrw0bs13wfjd7bhttps://lists.debian.org/debian-lts-announce/2023/10/msg00021.htmlhttps://lists.debian.org/debian-lts-announce/2025/07/msg00006.htmlhttps://security.gentoo.org/glsa/202401-11