CVE-2022-42890

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

Database specific

{
    "unresolved_ranges": [
        {
            "cpe": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "10.0"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "11.0"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/apache/xmlgraphics-batik

Affected ranges

Type

GIT

Repo

https://github.com/apache/xmlgraphics-batik

Events

Introduced

1b708df57205a70c2c9fb8235ff5eab837609968

Fixed

8e94aaaf3872a670040c6faebe82c907cb380fad

Database specific

{
    "cpe": "cpe:2.3:a:apache:batik:*:*:*:*:*:*:*:*",
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "1.0"
        },
        {
            "fixed": "1.16"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-42890.json"