Apache XML Graphics FOP versions 1.0 through 2.1 suffer from an information disclosure vulnerability. Continue reading...