Skip to content
OpenAdvisories

Package · Maven

org.apache.cxf:cxf-core

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2022-46364 Public exploit

    Apache CXF SSRF Vulnerability

    A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

    Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven