CVE-2022-40146

HIGH 7.5EPSS 6.3%

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.

CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 6.26% chance of exploitation in the next 30 days, 93th percentile
Published: 2022-09-22
Updated: 2025-11-03

Proof-of-concept exploits (2)

cckuailong/CVE-2022-40146_Exploit_Jar31★ · 2022-11-01
soulfoodisgood/CVE-2022-401460★ · 2024-07-30

References

Related