Skip to content
OpenAdvisories

Package · Maven

org.apache.cxf:cxf-rt-ws-security

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2014-0034

    Improper Input Validation in Apache CXF

    The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.

    org.apache.cxf:cxf-rt-ws-security Maven