Maven/org.apache.xmlgraphics:batik CVE-2017-5662: high 7.3, EPSS 4.12%
Improper Restriction of XML External Entity Reference in Apache Batik
Action: Upgrade org.apache.xmlgraphics:batik to 1.9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9 | - |
Fixed versions
| 1.9 |
Sources
- osv: GHSA-qwgx-59jw-qfg9
- https://nvd.nist.gov/vuln/detail/CVE-2017-5662
- https://access.redhat.com/errata/RHSA-2017:2546
- https://access.redhat.com/errata/RHSA-2017:2547
- https://access.redhat.com/errata/RHSA-2018:0319
- https://www.debian.org/security/2018/dsa-4215
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://xmlgraphics.apache.org/security.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.securityfocus.com/bid/97948
- http://www.securitytracker.com/id/1038334
CVE-2017-5662 · published · modified · JSON