CVE-2022-41704
Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.5EPSS 2.1%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
25 Oct 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Apache Software Foundation · Apache XML GraphicsWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →