← voltar
CVE-2022-38648

PDFTranscoder does not block external resources

EPSS 1.9%CWE-918
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.
Produtos afetados
Apache Software Foundation · Apache XML Graphics

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://lists.apache.org/thread/gfsktxvj7jtwyovmhhbrw0bs13wfjd7bhttps://lists.debian.org/debian-lts-announce/2023/10/msg00021.htmlhttps://lists.debian.org/debian-lts-announce/2025/07/msg00006.htmlhttps://security.gentoo.org/glsa/202401-11