{"id":"CVE-2022-44729","revision":"facc84c12ab94e96bf7a32c0d16f7836","records":[{"revision":"facc84c12ab94e96bf7a32c0d16f7836","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2022-44729","aliases":[],"title":"Apache XML Graphics Batik: Information disclosure vulnerability","description":"Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.\n\nOn version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.","state":0,"publishedAt":"2023-08-22T14:12:50.301+00:00","modifiedAt":"2026-10-08T21:24:17.324+00:00","affected":[{"ecosystem":"Vendor product","name":"Apache XML Graphics Batik","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unaffected\",\n                    \"product\": \"Apache XML Graphics Batik\",\n                    \"vendor\": \"Apache Software Foundation\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"1.16\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://xmlgraphics.apache.org/security.html","https://lists.apache.org/thread/hco2nw1typoorz33qzs0fcdx0ws6d6j2","http://www.openwall.com/lists/oss-security/2023/08/22/2","http://www.openwall.com/lists/oss-security/2023/08/22/4","https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html","https://security.gentoo.org/glsa/202401-11"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-44729","license":"CVE Program Terms of Use","key":"cve-program:CVE-2022-44729","identifiers":["CVE-2022-44729"]},"retained":false,"historicalAffected":[]}],"coverage":[]}