Red Hat Security Advisory

RHSA-2023:0164

Red Hat JBoss Enterprise Application Platform 7.4 security update

Released 2023-01-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 7.4.9 org.apache.cxf.cxf-core-3.4.10.redhat-00001.jar

Fixes 1 record

TI-2022-22907 CVE-2022-46364 · GHSA-x3x3-qwjq-8gj4

Apache CXF SSRF Vulnerability

MEDIUM 53

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02315 Published 2022-12-13 Partial fix · 3.5.5, 3.4.10 CWE-918