Approved changes feed: RSS · Atom

cpe:2.3:a:apache_software_foundation:apache_xml_graphics_batik:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a)
ProductApache Xml Graphics Batik (450169ef-dddb-5e29-bcdc-1b532d62d1a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-44730 vulnerable 2026-06-08 05:49:36.291230 Apache XML Graphics Batik: Information disclosure vulnerability
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL.
Published: 2023-08-22T13:57:00.282Z
Updated: 2025-02-13T16:33:42.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44729 vulnerable 2026-06-08 05:49:36.290078 Apache XML Graphics Batik: Information disclosure vulnerability
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.
Published: 2023-08-22T14:12:50.301Z
Updated: 2025-02-13T16:33:42.214Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.