Vulnerability CVE-2022-44729


Published: 2023-08-22

Description:
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.

On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.

Type:

CWE-918

 References:
https://lists.apache.org/thread/hco2nw1typoorz33qzs0fcdx0ws6d6j2
https://xmlgraphics.apache.org/security.html

Copyright 2026, cxsecurity.com

 

Back to Top