XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2015-03-24 17:59
Updated : 2024-02-28 12:20
NVD link : CVE-2015-0250
Mitre link : CVE-2015-0250
CVE.ORG link : CVE-2015-0250
JSON object : View
Products Affected
apache
- batik
canonical
- ubuntu_linux
redhat
- jboss_enterprise_brms_platform
CWE