GitStock

apache/xmlgraphics-batik · Security

Server-side request forgery (SSRF) in Apache Batik

GHSA ID
GHSA-2h63-qp69-fwvw
CVE ID
CVE-2020-11987
Severity
high
Published
Updated
CVSS
8.2 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v3
8.2 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Description

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

CWEs

  • CWE-20 · Improper Input Validation
  • CWE-918 · Server-Side Request Forgery (SSRF)

References