CVE-2022-44729
batik: Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue a...
CVE-2022-44729 is fixed in batik on 1 platform, first by DEBIAN-CVE-2022-44729, released August 22, 2023. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.1
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0092
60th percentile
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| batik · Debian 12.15 (bookworm) | 1.16+dfsg-1+deb12u1 | DEBIAN-CVE-2022-44729 | Aug 22, 2023 |
| batik · Debian 13.5 (trixie) | 1.17+dfsg-1 | DEBIAN-CVE-2022-44729 | Aug 22, 2023 |
| batik · Debian 14 | 1.17+dfsg-1 | DEBIAN-CVE-2022-44729 | Aug 22, 2023 |