Description
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
Remediation
References
Related Vulnerabilities
WordPress Plugin All-in-One WP Migration Arbitrary File Upload (7.40)
e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6434)
WordPress Plugin BuddyPress Activity Plus Cross-Site Scripting (1.6.3)
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6103)
Grafana Missing Authentication for Critical Function Vulnerability (CVE-2022-28660)