by Kastro
Paper/Archive/CVE-2024-28752

CVE-2024-28752

Apache Software Foundation Apache CXF — Apache CXF SSRF Vulnerability using the Aegis databinding

EPSS 3%CVSS 9.3
critical.is priorityof 100
45
CVSS 9.3 (ADP)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 87.1.871 × 2017.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the default databinding) are not impacted.

Affected

ProductAffectedFixed inSource
Apache CXF< 4.0.4, 3.6.3, 3.5.84.0.4, 3.6.3, 3.5.8CNA
oncommand_workflow_automationall versions–CISA-ADP
cxf< 4.0.44.0.4CISA-ADP
cxf< 3.6.33.6.3CISA-ADP
cxf< 3.5.83.5.8CISA-ADP

Scores by source

CISA ADP9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorycxf.apache.org/security-advisories.data/CVE-2024-28752.txtrefopenwall.com/lists/oss-security/2024/03/14/3refsecurity.netapp.com/advisory/ntap-20240517-0001