VDB
BDU%3A2021-01018
BDU%3A2021-01018
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость библиотеки для работы с SVG-изображениями Apache Batik, связанная с некорректной обработкой данных в атрибутах «xlink: href», позволяющая нарушителю осуществлять CSRF-атаки
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Novell Inc., Red Hat Inc., Apache Software Foundation, АО «Концерн ВНИИНС» | API Gateway, Enterprise Repository, SUSE Linux Enterprise Software Development Kit, Oracle Retail Order Broker, Instantis EnterpriseTrack, Red Hat JBoss Fuse, OpenSUSE Leap, Hospitality Opera 5, Red Hat Descision Manager, Communications MetaSolv Solution, Financial Services Analytical Applications Infrastructure, Fusion Middleware MapViewer, Red Hat Process Automation, Retail Integration Bus, Communications Application Session Controller, Batik, JD Edwards EnterpriseOne Tools, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) |
Timeline
- Mar 2, 2021 CVE Published
- Nov 21, 2023 CVE Updated
References
- https://lists.apache.org/thread.html/rab94fe68b180d2e2fba97abf6fe1ec83cff826be25f86cd90f047171@%3Ccommit.myfaces.apache.org%3E url
- https://lists.apache.org/thread.html/rcab14a9ec91aa4c151e0729966282920423eff50a22759fd21db6509@%3Ccommit.myfaces.apache.org%3E url
- https://www.oracle.com/security-alerts/cpujan2021.html url
- https://access.redhat.com/security/cve/cve-2019-17566 url
- https://www.suse.com/security/cve/CVE-2019-17566/ url
- https://www.oracle.com/security-alerts/cpuapr2021.html url
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url
- https://www.oracle.com/security-alerts/cpujan2021.htm advisory