Unrated
Apache CXF SSRF Vulnerability
CVE-2022-46364
First seen on SecPulse
Original description The description as published by the source.
A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory cxf.apache.org
- advisory github.com
- advisory nvd.nist.gov