title: Jar url should be blocked by DefaultScriptSecurity
description: Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.
problem types: CWE-918 Server-Side Request Forgery (SSRF)
affected:
{
vendor: Apache Software Foundation
product: Apache XML Graphics
versions:
version: Batik 1.14, status: affected
}