{"id":"CVE-2018-8013","details":"In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.","aliases":["GHSA-25gw-4pcc-45cf"],"modified":"2026-07-08T05:50:19.951476443Z","published":"2018-05-24T16:29:00.380Z","database_specific":{"unresolved_ranges":[{"vendor_product":"oracle:communications_diameter_signaling_router","cpes":["cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"8.3"}],"source":"CPE_RANGE"},{"vendor_product":"oracle:communications_webrtc_session_controller","cpes":["cpe:2.3:a:oracle:communications_webrtc_session_controller:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"7.2"}],"source":"CPE_RANGE"},{"extracted_events":[{"introduced":"7.3.3.0.0"},{"last_affected":"7.3.3.0.2"},{"introduced":"8.0.0.0.0"},{"last_affected":"8.0.7.1.0"}],"source":"CPE_RANGE","vendor_product":"oracle:financial_services_analytical_applications_infrastructure","cpes":["cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*"]},{"extracted_events":[{"introduced":"14.04"},{"last_affected":"14.04"}],"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux","cpes":["cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"]},{"cpes":["cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"},{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"},{"extracted_events":[{"introduced":"11.1.1.7.0"},{"last_affected":"11.1.1.7.0"},{"introduced":"11.1.1.9.0"},{"last_affected":"11.1.1.9.0"},{"introduced":"12.2.1.3.0"},{"last_affected":"12.2.1.3.0"},{"introduced":"12.2.1.4.0"},{"last_affected":"12.2.1.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:business_intelligence","cpes":["cpe:2.3:a:oracle:business_intelligence:11.1.1.7.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*"]},{"source":"CPE_STRING","vendor_product":"oracle:communications_metasolv_solution","cpes":["cpe:2.3:a:oracle:communications_metasolv_solution:6.3.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.3.0"},{"last_affected":"6.3.0"}]},{"cpes":["cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.2.1.3.0"},{"last_affected":"12.2.1.3.0"}],"source":"CPE_STRING","vendor_product":"oracle:data_integrator"},{"source":"CPE_STRING","vendor_product":"oracle:enterprise_repository","cpes":["cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_repository:12.1.3.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.1.1.7.0"},{"last_affected":"11.1.1.7.0"},{"introduced":"12.1.3.0.0"},{"last_affected":"12.1.3.0.0"}]},{"extracted_events":[{"introduced":"12.2.1.2"},{"last_affected":"12.2.1.2"},{"introduced":"12.2.1.3"},{"last_affected":"12.2.1.3"}],"source":"CPE_STRING","vendor_product":"oracle:fusion_middleware_mapviewer","cpes":["cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"17.1"},{"last_affected":"17.1"},{"introduced":"17.2"},{"last_affected":"17.2"},{"introduced":"17.3"},{"last_affected":"17.3"}],"source":"CPE_STRING","vendor_product":"oracle:instantis_enterprisetrack"},{"extracted_events":[{"introduced":"10.1.1"},{"last_affected":"10.1.1"},{"introduced":"10.2.1"},{"last_affected":"10.2.1"}],"source":"CPE_STRING","vendor_product":"oracle:insurance_calculation_engine","cpes":["cpe:2.3:a:oracle:insurance_calculation_engine:10.1.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:insurance_calculation_engine:10.2.1:*:*:*:*:*:*:*"]},{"source":"CPE_STRING","vendor_product":"oracle:insurance_policy_administration_j2ee","cpes":["cpe:2.3:a:oracle:insurance_policy_administration_j2ee:10.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:insurance_policy_administration_j2ee:10.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.0"},{"last_affected":"10.0"},{"introduced":"10.2"},{"last_affected":"10.2"}]},{"source":"CPE_STRING","vendor_product":"oracle:jd_edwards_enterpriseone_tools","cpes":["cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.2"},{"last_affected":"9.2"}]},{"source":"CPE_STRING","vendor_product":"oracle:retail_back_office","cpes":["cpe:2.3:a:oracle:retail_back_office:13.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_back_office:13.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_back_office:14:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"13.3"},{"last_affected":"13.3"},{"introduced":"13.4"},{"last_affected":"13.4"},{"introduced":"14"},{"last_affected":"14"},{"introduced":"14.1"},{"last_affected":"14.1"}]},{"cpes":["cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.1"},{"last_affected":"14.1"}],"source":"CPE_STRING","vendor_product":"oracle:retail_central_office"},{"source":"CPE_STRING","vendor_product":"oracle:retail_integration_bus","cpes":["cpe:2.3:a:oracle:retail_integration_bus:17.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"17.0"},{"last_affected":"17.0"}]},{"cpes":["cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_order_broker:5.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_order_broker:5.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.1"},{"last_affected":"5.1"},{"introduced":"5.2"},{"last_affected":"5.2"},{"introduced":"15.0"},{"last_affected":"15.0"},{"introduced":"16.0"},{"last_affected":"16.0"}],"source":"CPE_STRING","vendor_product":"oracle:retail_order_broker"},{"cpes":["cpe:2.3:a:oracle:retail_point-of-service:13.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_point-of-service:14.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"13.4"},{"last_affected":"13.4"},{"introduced":"14.0"},{"last_affected":"14.0"},{"introduced":"14.1"},{"last_affected":"14.1"}],"source":"CPE_STRING","vendor_product":"oracle:retail_point-of-service"},{"extracted_events":[{"introduced":"14.1"},{"last_affected":"14.1"}],"source":"CPE_STRING","vendor_product":"oracle:retail_returns_management","cpes":["cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:*"]}]},"references":[{"type":"WEB","url":"https://lists.apache.org/thread.html/r9e90b4d1cf6ea87a79bb506541140dfbf4801f4463a7cee08126ee44%40%3Ccommits.xmlgraphics.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rc0a31867796043fbe59113fb654fe8b13309fe04f8935acb8d0fab19%40%3Ccommits.xmlgraphics.apache.org%3E"},{"type":"WEB","url":"https://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-dev/201805.mbox/%3c000701d3f28f%24d01860a0%24704921e0%24%40gmail.com%3e"},{"type":"WEB","url":"https://www.oracle.com/security-alerts/cpujul2020.html"},{"type":"WEB","url":"https://www.oracle.com/security-alerts/cpuoct2020.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/104252"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1040995"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2018/05/msg00016.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202401-11"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3661-1/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4215"},{"type":"ADVISORY","url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"},{"type":"ADVISORY","url":"https://xmlgraphics.apache.org/security.html"},{"type":"FIX","url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"},{"type":"FIX","url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/xmlgraphics-batik","events":[{"introduced":"1b708df57205a70c2c9fb8235ff5eab837609968"},{"fixed":"55a7e24c4f4713efa012263e2262d40238d0c633"}],"database_specific":{"extracted_events":[{"introduced":"1.0"},{"fixed":"1.10"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:apache:batik:*:*:*:*:*:*:*:*"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8013.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}