CVE-2022-42890

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-42890
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-42890.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-42890
Aliases
Downstream
Related
Published
2022-10-25T00:00:00Z
Modified
2026-05-15T11:53:33.121019561Z
Summary
Apache Batik prior to 1.16 allows RCE via scripting
Details

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "Batik"
                },
                {
                    "last_affected": "1.15"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/42xxx/CVE-2022-42890.json",
    "cna_assigner": "apache"
}
References

Affected packages