Summary
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache CXF ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.
Product
Apache CXF ist ein Open Source-Web Service-Framework.
Vulnerabilities 1
-
Medium 5.6
Apache CXF: Denial of Service and sensitive data exposure in logs
Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which means that the entire temporary file is read into memory and then logged. An attacker might be able to exploit this to cause a denial of servi…
Revision history
-
#3
Neue Updates von NetApp aufgenommen
-
#2
Neue Updates von Dell aufgenommen
-
#1
Initiale Fassung
References
-
Apache Security Advisory vom 2025-07-15
https://cxf.apache.org/security-advisories.data/CVE-2025-48795.txt?version=1&modificationDate=1752578416000&api=v2
-
GitHub Advisory Database vom 2025-07-15
https://github.com/advisories/GHSA-36wv-v2qp-v4g4
-
Dell Security Advisory DSA-2026-152 vom 2026-03-23
https://www.dell.com/support/kbdoc/de-de/000443243/dsa-2026-152-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities
-
NetApp Security Advisory NTAP-20260327-0014 vom 2026-03-27
https://security.netapp.com/advisory/NTAP-20260327-0014