| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.cxf.fediz:fediz-core | ≥ 1.2, < 1.2.1< 1.1.3 | 1.2.11.1.3 |
| org.apache.cxf.fediz:fediz-idp | ≥ 1.2, < 1.2.1< 1.1.3 | 1.2.11.1.3 |
| cxf fediz | = 1.2.0≤ 1.1.2 |
Application plugins in Apache CXF Fediz prior to version 1.1.3 and 1.2.x prior to 1.2.1 allow remote attackers to create a denial of service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free