vulnerability

Amazon Linux AMI 2: CVE-2022-40146: Security patch for batik (Multiple Advisories)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:N/A:N)

Published

Sep 22, 2022

Added

Mar 7, 2023

Modified

May 20, 2026

Description

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.

Solutions

amazon-linux-ami-2-upgrade-batikamazon-linux-ami-2-upgrade-batik-demoamazon-linux-ami-2-upgrade-batik-javadocamazon-linux-ami-2-upgrade-batik-rasterizeramazon-linux-ami-2-upgrade-batik-slideshowamazon-linux-ami-2-upgrade-batik-squiggleamazon-linux-ami-2-upgrade-batik-svgppamazon-linux-ami-2-upgrade-batik-ttf2svg

References

AMAZON-AL2/ALAS-2023-1966
CVE-2022-40146
https://attackerkb.com/topics/CVE-2022-40146
CWE-918
EUVD-EUVD-2022-6834
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6834

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report