CVE-2022-41704

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16.

Database specific

{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "10.0"
                }
            ],
            "cpe": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*"
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "11.0"
                }
            ],
            "cpe": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"
        }
    ]
}

References

Affected packages

Git / github.com/apache/xmlgraphics-batik

Affected ranges

Type

GIT

Repo

https://github.com/apache/xmlgraphics-batik

Events

Introduced

1b708df57205a70c2c9fb8235ff5eab837609968

Fixed

8e94aaaf3872a670040c6faebe82c907cb380fad

Database specific

{
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "1.0"
        },
        {
            "fixed": "1.16"
        }
    ],
    "cpe": "cpe:2.3:a:apache:batik:*:*:*:*:*:*:*:*"
}

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-41704.json"