CVE-2022-44730

Katalog CVE

CVSS 4.4 · Medium EPSS 0,88%

Kerentanan Server-Side Request Forgery (SSRF) pada apache xml graphics batik, debian linux. Skor CVSS 3.1 4.4 (Medium) menurut NVD.

Deskripsi (NVD)

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL.

Rincian

Terbit di NVD

22 Agustus 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.4 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

0,88% peluang dieksploitasi; lebih tinggi dari 57,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.apache.org/thread/58m5817jr059f4v1zogh0fngj9pwjyj0 mailing list · advisory vendor
• https://xmlgraphics.apache.org/security.html advisory vendor
• http://www.openwall.com/lists/oss-security/2023/08/22/3 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/08/22/5 mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html mailing list
• https://security.gentoo.org/glsa/202401-11