Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-42890

Apache Batik prior to 1.16 allows RCE via scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache XML Graphics

  • Batik to ≤ 1.15affected

References