Description
A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.
Remediation
References
http://www.openwall.com/lists/oss-security/2022/10/25/3
https://lists.apache.org/thread/pkvhy0nsj1h1mlon008wtzhosbtxjwly
https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html
https://security.gentoo.org/glsa/202401-11
https://www.debian.org/security/2022/dsa-5264
Related Vulnerabilities
CVE-2020-2209 Vulnerability in maven package org.jenkins-ci.plugins:testcomplete
CVE-2021-41182 Vulnerability in maven package org.webjars:jquery-ui
CVE-2021-21193 Vulnerability in npm package electron
CVE-2022-0624 Vulnerability in npm package parse-path
CVE-2020-12265 Vulnerability in maven package org.webjars.npm:decompress-tar