Dashboard / CVE-2022-44729

CVE-2022-44729

HIGH
MEDIUM Priority: 0.07 BB Relevance: 39/100
Published: 2023-08-22 Modified: 2026-11-10 First seen: 2026-11-10 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Required
S: Unchanged
C: High
I: None
A: High

Description

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
apache xml_graphics_batik 1.0 – 1.16
debian debian_linux 10.0

References & Advisories (6)

Bug Bounty Relevance

39 / 100
✓ No authentication
✓ Low complexity

CVSS Score

7.1 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

EPSS — Exploitation Probability

0.92%
Raw Score 0.009190
Percentile 60.8%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00919
2026-11-12
0.00919
2026-11-10
0.00919
2026-11-09
0.00919

Intelligence Sources

nvd ref →

External Links