GHSA-5m3j-pxh7-455p
Apache CXF: SSRF vulnerability via WADL stylesheet parameter
At a glance
- Published
- Updated
- CVE
- CVE-2024-29736
- CVSS_V3
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS_V4
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Description
A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only applies if a custom stylesheet parameter is configured.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.apache.cxf:cxf-rt-rs-service-description | introduced 4.0.0, fixed 4.0.5 |
| Maven · org.apache.cxf:cxf-rt-rs-service-description | introduced 3.6.0, fixed 3.6.4 |
| Maven · org.apache.cxf:cxf-rt-rs-service-description | introduced 0, fixed 3.5.9 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-29736 ADVISORY
- https://github.com/apache/cxf/commit/378afe1acb7503315bc63555c8743db0f55d8312 WEB
- https://github.com/apache/cxf/commit/bafb0cadf723fc3962031c34f1f20dc0e8b7a36b WEB
- https://github.com/apache/cxf/commit/df2241c59481a57aebb1c0693b778a35baaf5570 WEB
- https://github.com/apache/cxf PACKAGE
- https://lists.apache.org/thread/4jtpsswn2r6xommol54p5mg263ysgdw2 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |