Skip to content
OpenAdvisories

Product · Apache

CXF

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2019-12423

    Private key leak in Apache CXF

    Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local …

    Apache CXF org.apache.cxf:cxf org.apache.cxf:apache-cxf Maven