Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2020-11988

xmlgraphics-commons: SSRF due to improper input validation by the XMPParser

Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. Users should upgrade to 2.6 or later.

CVSS 3.1 · 8.2 High EPSS 6.7% KEV · Not listed
Vendors
Apache Fedoraproject Redhat
Products
Xmlgraphics Commons Fedora Jboss Enterprise Bpms Platform and 2 more