Test ID:	1.3.6.1.4.1.25623.1.1.10.2024.0068
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2024-0068)
Summary:	The remote host is missing an update for the 'batik' package(s) announced via the MGASA-2024-0068 advisory.
Description:	Summary: The remote host is missing an update for the 'batik' package(s) announced via the MGASA-2024-0068 advisory. Vulnerability Insight: The updated packages fix security vulnerabilities: Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. (CVE-2022-38398) Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. (CVE-2022-38648) Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. (CVE-2022-40146) A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. (CVE-2022-41704) A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. (CVE-2022-42890) Affected Software/OS: 'batik' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-38398 https://security.gentoo.org/glsa/202401-11 https://lists.apache.org/thread/712c9xwtmyghyokzrm2ml6sps4xlmbsx https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html Common Vulnerability Exposure (CVE) ID: CVE-2022-38648 https://lists.apache.org/thread/gfsktxvj7jtwyovmhhbrw0bs13wfjd7b Common Vulnerability Exposure (CVE) ID: CVE-2022-40146 https://lists.apache.org/thread/hxtddqjty2sbs12y97c8g7xfh17jzxsx Common Vulnerability Exposure (CVE) ID: CVE-2022-41704 Debian Security Information: DSA-5264 (Google Search) https://www.debian.org/security/2022/dsa-5264 https://lists.apache.org/thread/hplhx0o74jb7blj39fm4kw3otcnjd6xf https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html http://www.openwall.com/lists/oss-security/2022/10/25/2 Common Vulnerability Exposure (CVE) ID: CVE-2022-42890 https://lists.apache.org/thread/pkvhy0nsj1h1mlon008wtzhosbtxjwly http://www.openwall.com/lists/oss-security/2022/10/25/3
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.