CRITICAL 9.8 Maven
Apache CXF Server-Side Request Forgery vulnerability
GHSA-x3x3-qwjq-8gj4 · CVE-2022-46364
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type.
Ready to move
Start Securing
Free, no credit card | First findings in minutes