by Kastro
Paper/Archive/CVE-2024-29736

CVE-2024-29736

Apache Software Foundation Apache CXF — Apache CXF: SSRF vulnerability via WADL stylesheet parameter

EPSS 1%CVSS 9.1
critical.is priorityof 100
40
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 64.8.648 × 2013.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only applies if a custom stylesheet parameter is configured.

Affected

ProductAffectedFixed inSource
Apache CXF< 3.5.9, 3.6.4, 4.0.53.5.9, 3.6.4, 4.0.5CNA
cxf< 3.5.93.5.9CISA-ADP
cxf< 3.6.43.6.4CISA-ADP
cxf< 4.0.54.0.5CISA-ADP

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADP7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

advisorylists.apache.org/thread/4jtpsswn2r6xommol54p5mg263ysgdw2refopenwall.com/lists/oss-security/2024/07/18/2refsecurity.netapp.com/advisory/ntap-20241115-0003