GHSA-qmgx-j96g-4428
SSRF vulnerability using the Aegis DataBinding in Apache CXF
At a glance
- Published
- Updated
- CVE
- CVE-2024-28752
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
- CVSS_V4
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
Description
A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the default databinding) are not impacted.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.apache.cxf:cxf-rt-databinding-aegis | introduced 0, fixed 3.5.8 |
| Maven · org.apache.cxf:cxf-rt-databinding-aegis | introduced 3.6.0, fixed 3.6.3 |
| Maven · org.apache.cxf:cxf-rt-databinding-aegis | introduced 4.0.0, fixed 4.0.4 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-28752 ADVISORY
- https://github.com/apache/cxf/commit/d0baeb3ee64c6d7c883bd2f5c4cb0de6b0b5f463 WEB
- https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt WEB
- https://github.com/apache/cxf PACKAGE
- https://security.netapp.com/advisory/ntap-20240517-0001 WEB
- http://www.openwall.com/lists/oss-security/2024/03/14/3 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |