Description
A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.
Remediation
References
http://www.openwall.com/lists/oss-security/2022/10/25/3
https://lists.apache.org/thread/pkvhy0nsj1h1mlon008wtzhosbtxjwly
https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html
https://security.gentoo.org/glsa/202401-11
https://www.debian.org/security/2022/dsa-5264
Related Vulnerabilities
CVE-2022-36919 Vulnerability in maven package org.jenkins-ci.plugins:coverity
CVE-2020-11995 Vulnerability in maven package com.caucho:hessian
CVE-2023-28709 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2019-1003036 Vulnerability in maven package org.jenkins-ci.plugins:azure-vm-agents
CVE-2021-32827 Vulnerability in maven package org.mock-server:mockserver-core