CVE-2024-29736: Apache CXF: SSRF vulnerability via WADL stylesheet parameter
First published: Thu Jul 18 2024(Updated: )
A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only applies if a custom stylesheet parameter is configured.
Credit: security@apache.org security@apache.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| maven/org.apache.cxf:cxf-rt-rs-service-description | <3.5.9 | 3.5.9 |
| maven/org.apache.cxf:cxf-rt-rs-service-description | >=3.6.0<3.6.4 | 3.6.4 |
| maven/org.apache.cxf:cxf-rt-rs-service-description | >=4.0.0<4.0.5 | 4.0.5 |
| Apache CXF | <3.5.9 | |
| Apache CXF | >=3.6.0<3.6.4 | |
| Apache CXF | >=4.0.0<4.0.5 | |
| <3.5.9 | ||
| >=3.6.0<3.6.4 | ||
| >=4.0.0<4.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://nvd.nist.gov/vuln/detail/CVE-2024-29736
- https://lists.apache.org/thread/4jtpsswn2r6xommol54p5mg263ysgdw2
- https://github.com/apache/cxf/commit/378afe1acb7503315bc63555c8743db0f55d8312
- https://github.com/apache/cxf/commit/bafb0cadf723fc3962031c34f1f20dc0e8b7a36b
- https://github.com/apache/cxf/commit/df2241c59481a57aebb1c0693b778a35baaf5570
- https://github.com/advisories/GHSA-5m3j-pxh7-455p (Advisory)
- https://access.redhat.com/errata/RHSA-2024:6883
- https://bugzilla.redhat.com/show_bug.cgi?id=2298827
- collector/oss-sec
- source/oss-sec
- alias/CVE-2024-29736
- agent/title
- agent/first-publish-date
- agent/weakness
- agent/type
- agent/author
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/redhat-bugzilla
- source/Red Hat
- agent/severity
- agent/references
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-5m3j-pxh7-455p
- agent/last-modified-date
- agent/softwarecombine
- collector/nvd-cve
- agent/event
- collector/github-advisory
- agent/trending
- vendor/apache
- canonical/apache cxf
- version/apache cxf/3.6.0
- version/apache cxf/4.0.0
- package-manager/maven