CVE-2023-51441 Apache Axis 1.x (EOL) may allow SSRF when untrusted input is passed to the service admin HTTP API

🗓️ 06 Jan 2024 11:59:37Reported by apacheType

Apache Axis 1.x (EOL) SSRF vulnerabilit

Reporter	Title	Published	Views	Family All 34
IBM Security Bulletins	Security Bulletin: Apache Axis1 CVE-2023-51441 security vulnerability in FileNet Content Manager, Process Engine Process Orchestration	9 Jul 202515:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Application Dependency Discovery Manager is vulnerable to server-side request forgery attack.	10 Jun 202512:35	–	ibm
IBM Security Bulletins	Security Bulletin: Apache axis.jar is present in older Statistics releases that use IBM SPSS C&DS	25 Mar 202515:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM B2B Sterling Integrator is affected by Apache Axis vulnerability to server-side request forgery	14 Nov 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM System Storage Support for Microsoft Volume Shadow Copy Service and Virtual Disk Service is vulnerable to an improper input validation vulnerability due to Apache Axis. CVE-2023-51441.	27 Oct 202516:14	–	ibm
Circl	CVE-2023-51441	6 Jan 202413:21	–	circl
CNNVD	Apache Axis 代码问题漏洞	6 Jan 202400:00	–	cnnvd
CNVD	Apache Axis Code Issue Vulnerability	11 Jan 202400:00	–	cnvd
CVE	CVE-2023-51441	6 Jan 202411:59	–	cve
Debian CVE	CVE-2023-51441	6 Jan 202411:59	–	debiancve

[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.apache.axis:axis-rt-core",
    "product": "Apache Axis",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "1.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/8nrm5thop8f82pglx4o0jg8wmvy6d9yd
github	www.github.com/apache/axis-axis1-java/commit/685c309febc64aa393b2d64a05f90e7eb9f73e06

31 Jan 2024 09:07Current

7.2High risk

Vulners AI Score7.2

EPSS0.00075

CWE-918