CVE-2022-38648
PDFTranscoder does not block external resources
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.9%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
22 Sep 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.
Affected products
Apache Software Foundation · Apache XML GraphicsWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →