title: Apache Batik prior to 1.16 allows RCE via scripting
description: A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.
problem types: Remote code execution via batik scripting
affected:
{
vendor: Apache Software Foundation
product: Apache XML Graphics
versions:
version: Batik, status: affected, lessThanOrEqual: 1.15, versionType: custom
}