Remote Code Execution Vulnerability in Apache XML Graphics Batik
CVE-2022-42890 · HIGH Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.
Learn more about our Cis Benchmark Audit For Apache Http Server.