Description
A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.
Remediation
References
https://lists.apache.org/thread/pkvhy0nsj1h1mlon008wtzhosbtxjwly
http://www.openwall.com/lists/oss-security/2022/10/25/3
https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html
https://www.debian.org/security/2022/dsa-5264
https://security.gentoo.org/glsa/202401-11
Related Vulnerabilities
CVE-2018-8003 Vulnerability in maven package org.apache.ambari:ambari-server
CVE-2022-36084 Vulnerability in npm package cruddl
CVE-2019-10427 Vulnerability in maven package org.jenkins-ci.plugins:aqua-microscanner
CVE-2011-0533 Vulnerability in maven package org.apache.archiva:archiva-common
CVE-2019-20343 Vulnerability in maven package org.codehaus.mojo:exec-maven-plugin