by Kastro
Paper/Archive/CVE-2025-48913

CVE-2025-48913

Apache Software Foundation Apache CXF — Apache CXF: Untrusted JMS configuration can lead to RCE

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 64.9.649 × 2013.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code execution capabilities. This interface is now restricted to reject those protocols, removing this possibility. Users are recommended to upgrade to versions 3.6.8, 4.0.9 or 4.1.3, which fix this issue.

Affected

ProductAffectedFixed inSource
Apache CXF4.1.0 – < 4.1.34.1.3CNA
Apache CXF4.0.0 – < 4.0.94.0.9CNA
Apache CXF< 3.6.83.6.8CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorylists.apache.org/thread/f1nv488ztc0js4g5ml2v88mzkzslyh83refopenwall.com/lists/oss-security/2025/08/07/2