CVE-2020-11988 log
| Source |
|
| Severity | Medium |
| Remote | Yes |
| Type | Url request injection |
| Description | The Apache XML Graphics Commons library before version 2.6 is vulnerable to server-side request forgery (SSRF) via the XMPParser that allow an attacker to cause the underlying server to make arbitrary GET requests. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1618 | java-xmlgraphics-commons | 2.4-2 | 2.6-1 | Medium | Fixed |