Package · Maven

org.apache.cxf:cxf-rt-databinding-aegis

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.3

CVE-2024-28752 Public exploit

Apache CXF SSRF Vulnerability using the Aegis databinding

A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the …

Apache Software Foundation Apache CXF opensearch-2 org.apache.cxf:cxf-rt-databinding-aegis Wolfi Maven

Mar 15, 2024