Apache CXF Server-Side Request Forgery vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-46364 · ADVISORY
• cxf.apache.org/security-advisories.data/CVE-2022-46364.txt · WEB

Lỗ hổng khác của org.apache.cxf:cxf-core

• CVE-2026-50645CAO 7.5There is no restriction on the amount of attachment headers that a message can contain when being deserialized by Apache CXF, which can lead…
• CVE-2026-49875NGHIÊM TRỌNG 9.8Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening conf…
• CVE-2025-48795TRUNG BÌNH 5.6Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which means that the entire t…
• CVE-2025-23184CAO 7.5A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the Cac…
• CVE-2022-46363CAO 7.5A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration…