Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server t…

{
                    "vendor": "n/a",
                    "product": "Apache Batik",
                    "versions": [
                        {
                            "version": "Apache Batik 1.13",
                            "status": "affected"
                        }
                    ]
                }