logo

Database

Server-side request forgery (SSRF) In java-xmlgraphics-commons

Description

url request injection

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2020-119882. NVD-2020-119883. OSV-2020-119884. OSV-DEBIAN-2020-119885. GCVE-2020-119886. SECURITY-TRACKER-CVE-2020-11988

References

1. https://github.com/apache/xmlgraphics-commons/commit/57393912eb87b994c7fed39ddf30fb778a2751832. https://github.com/apache/xmlgraphics-commons3. https://issues.apache.org/jira/browse/XGC-1224. https://lists.apache.org/thread.html/r2877ae10e8be56a3c52d03e373512ddd32f16b863f24c2e22f5a5ba2@%3Cdev.poi.apache.org%3E5. https://lists.apache.org/thread.html/r588d05a0790b40a0eb81088252e1e8c1efb99706631421f17038eb05@%3Cdev.poi.apache.org%3E6. https://lists.apache.org/thread.html/ra8f4d6ae402ec020ee3e8c28632c91be131c4d8b4c9c6756a179b12b@%3Cdev.jmeter.apache.org%3E7. https://lists.fedoraproject.org/archives/list/[email protected]/message/22HESSYU7T4D6GGENUVEX3X3H6FGBECH8. https://lists.fedoraproject.org/archives/list/[email protected]/message/JP4XA56DA3BFNRBBLBXM6ZAI5RUVFA339. https://www.oracle.com//security-alerts/cpujul2021.html10. https://www.oracle.com/security-alerts/cpuoct2021.html11. https://xmlgraphics.apache.org/security.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.