PT-2020-5514 · Apache+3 · Apache Batik+3

Published 2020-06-15 · Updated 2024-06-15 · CVE-2019-17566

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Apache Batik (affected versions not specified)

Description The issue is related to improper input validation by the xlink:href attributes, which can lead to server-side request forgery. An attacker could exploit this by using a specially-crafted argument to cause the underlying server to make arbitrary GET requests. This could potentially allow for CSRF attacks.

Recommendations As a temporary workaround, consider disabling the use of xlink:href attributes in Apache Batik until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using specially-crafted arguments that could trigger the vulnerability until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

CSRF

RCE

Weakness Enumeration

CWE-918

CWE-352

CWE-20

Related Identifiers

BDU:2021-01018

CVE-2019-17566

GHSA-CMX4-P4V5-HMR5

MGASA-2021-0168

OPENSUSE-SU-2020:0851-1

OPENSUSE-SU-2020:1043-1

OPENSUSE-SU-2020_0851-1

OPENSUSE-SU-2024:11522-1

ROSA-SA-2023-2239

SUSE-SU-2020:1800-1

SUSE-SU-2020_1800-1

SUSE-SU-2024:0777-1

USN-6117-1

Affected Products

Apache Batik

Linuxmint

Suse

Ubuntu

References · 74

• 🔥 https://github.com/cckuailong/CVE-2022-40146_Exploit_Jar · Exploit
• https://oracle.com/security-alerts/cpujan2021.html · Patch
• https://ubuntu.com/security/CVE-2019-17566 · Vendor Advisory
• https://oracle.com/security-alerts/cpujan2022.html · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2020:0851-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1800-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01018 · Security Note
• https://oracle.com/security-alerts/cpujul2022.html · Patch
• https://oracle.com/security-alerts/cpuApr2021.html · Patch
• https://security.gentoo.org/glsa/202401-11 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1043-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0168.html · Security Note
• https://osv.dev/vulnerability/MGASA-2021-0168 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-17566 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0777-1 · Vendor Advisory