CVE-2022-40146
Assigner: apache
Published: 2022-09-22T00:00:00
State: PUBLISHED
title: Jar url should be blocked by DefaultScriptSecurity
descriptions: value: Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.
affected: vendor: Apache Software Foundation
product: Apache XML Graphics
versions: version: Batik 1.14
status: affected
problemTypes: descriptions: type: CWE
description: CWE-918 Server-Side Request Forgery (SSRF)
cweId: CWE-918
x_generator: engine: Vulnogram 0.0.9
source: discovery: UNKNOWN