title: Apache XML Graphics Batik: Information disclosure vulnerability
description: Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.
A malicious SVG can probe user profile / data and send it directly as parameter to a URL.
problem types: CWE-918 Server-Side Request Forgery (SSRF)
affected:
{
defaultStatus: unaffected
product: Apache XML Graphics Batik
vendor: Apache Software Foundation
versions:
status: affected, version: 1.16
}
metrics:
other: [
content: {'text': 'moderate'}
type: Textual description of severity
]