USN-6117-1

Dashboard / Vulnerabilities / USN-6117-1

USN-6117-1

Summary: batik vulnerabilities

Details: It was discovered that Apache Batik incorrectly handled certain inputs. An attacker could possibly use this to perform a cross site request forgery attack. (CVE-2019-17566, CVE-2020-11987, CVE-2022-38398, CVE-2022-38648) It was discovered that Apache Batik incorrectly handled Jar URLs in some situations. A remote attacker could use this issue to access files on the server. (CVE-2022-40146) It was discovered that Apache Batik allowed running untrusted Java code from an SVG. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2022-41704, CVE-2022-42890)

References: https://ubuntu.com/security/notices/USN-6117-1, https://ubuntu.com/security/CVE-2019-17566, https://ubuntu.com/security/CVE-2020-11987, https://ubuntu.com/security/CVE-2022-38398, https://ubuntu.com/security/CVE-2022-38648, https://ubuntu.com/security/CVE-2022-40146, https://ubuntu.com/security/CVE-2022-41704, https://ubuntu.com/security/CVE-2022-42890