Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.
A malicious SVG can probe user profile / data and send it directly as parameter to a URL.
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xml_graphics_batik | Apache | 1.0 (including) | 1.16 (including) |
| RHINT Camel-Springboot 4.0.0 | RedHat | batik | * |
| RHPAM 7.13.5 async | RedHat | batik | * |
| Batik | Ubuntu | bionic | * |
| Batik | Ubuntu | lunar | * |
| Batik | Ubuntu | mantic | * |
| Batik | Ubuntu | trusty | * |
| Batik | Ubuntu | xenial | * |