Apache CXF: SSRF vulnerability via WADL stylesheet parameter
A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only applies if a custom stylesheet parameter is configured.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-29736US | critical9.1 | — | ||
A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The a… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/apache/cxfPACKAGE
- https://github.com/apache/cxf/commit/378afe1acb7503315bc63555c8743db0f55d8312WEB
- https://github.com/apache/cxf/commit/bafb0cadf723fc3962031c34f1f20dc0e8b7a36bWEB
- https://github.com/apache/cxf/commit/df2241c59481a57aebb1c0693b778a35baaf5570WEB
- https://lists.apache.org/thread/4jtpsswn2r6xommol54p5mg263ysgdw2WEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-29736ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan