CVE-2022-42890

—

CVSS 3.1

7.5 high

EPSS

3%p85

Published

Oct 25, 2022 (Oct 25, 2022)

Modified

Jun 17, 2026

Description

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

Vendors: apache debian
Products: batik, debian linux
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news0 stories

No ingested article mentions this CVE yet.