CVE-2017-5662

CVE-2017-5662 is a high-severity XML External Entity (XXE) vulnerability affecting Apache Batik versions prior to 1.9. This flaw allows authenticated attackers to disclose arbitrary files on the server's filesystem by submitting specially crafted SVG files, with the potential for full server compromise if the application runs with root privileges. The vulnerability has a CVSS score of 7.3 (HIGH) due to its low attack complexity and high impact on confidentiality and availability, as it can also lead to denial-of-service via amplification attacks. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.