Apache CXF Server-Side Request Forgery vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-46364 · ADVISORY
• cxf.apache.org/security-advisories.data/CVE-2022-46364.txt · WEB

org.apache.cxf:cxf-core のその他の脆弱性

• CVE-2026-50645高 7.5There is no restriction on the amount of attachment headers that a message can contain when being deserialized by Apache CXF, which can lead…
• CVE-2026-49875緊急 9.8Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening conf…
• CVE-2025-48795中 5.6Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which means that the entire t…
• CVE-2025-23184高 7.5A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the Cac…
• CVE-2022-46363高 7.5A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration…