GitHub Advisoryadvisory · Maven

GHSA-wfw6-mmmp-87xm Improper Input Validation in Apache Batik

MEDIUM Published 2022-05-17 Modified 2022-07-06 Official page ↗
Aliases
CVE-2015-0250
Ecosystem
Maven
Packages
org.apache.xmlgraphics:batik
Severity
Moderate
Weaknesses
CWE-20
Reviewed
2022-07-06

Affected packages

• Maven org.apache.xmlgraphics:batik: >= 1.0, < 1.8 → fixed in 1.8

Description

XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.

Related

Alias · CVE (1)

  • CVE-2015-0250 XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References