https://www.systemtek.co.uk/2022/10/apache-batik-defaultexternalresourcesecurity-server-side-request-forgery-information-disclosure-vulnerability-cve-2022-38398/