Description
A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.
Remediation
References
http://www.openwall.com/lists/oss-security/2022/10/25/3
https://lists.apache.org/thread/pkvhy0nsj1h1mlon008wtzhosbtxjwly
https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html
https://security.gentoo.org/glsa/202401-11
https://www.debian.org/security/2022/dsa-5264
Related Vulnerabilities
CVE-2022-31198 Vulnerability in maven package org.webjars.npm:openzeppelin__contracts-upgradeable
CVE-2019-1003091 Vulnerability in maven package com.soasta.jenkins:cloudtest
CVE-2020-2238 Vulnerability in maven package org.jenkins-ci.plugins:git-parameter
CVE-2019-15598 Vulnerability in npm package tree-kill
CVE-2022-41930 Vulnerability in maven package org.xwiki.platform:xwiki-platform-user-profile-ui