CVE-2020-11987 log
| Source |
|
| Severity | Medium |
| Remote | Yes |
| Type | Url request injection |
| Description | The Apache Batik library before version 1.14 is vulnerable to server-side request forgery (SSRF) via the NodePickerPanel that allow an attacker to cause the underlying server to make arbitrary GET requests. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1617 | java-batik | 1.13-1 | 1.14-1 | Medium | Fixed |