Apache Axis Improper Input Validation vulnerability

🗓️ 06 Jan 2024 12:30:34Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 52 Views

Apache Axis 1.x SSRF Vulnerabilit

Reporter	Title	Published	Views	Family All 34
IBM Security Bulletins	Security Bulletin: Apache Axis1 CVE-2023-51441 security vulnerability in FileNet Content Manager, Process Engine Process Orchestration	9 Jul 202515:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Application Dependency Discovery Manager is vulnerable to server-side request forgery attack.	10 Jun 202512:35	–	ibm
IBM Security Bulletins	Security Bulletin: Apache axis.jar is present in older Statistics releases that use IBM SPSS C&DS	25 Mar 202515:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM B2B Sterling Integrator is affected by Apache Axis vulnerability to server-side request forgery	14 Nov 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM System Storage Support for Microsoft Volume Shadow Copy Service and Virtual Disk Service is vulnerable to an improper input validation vulnerability due to Apache Axis. CVE-2023-51441.	27 Oct 202516:14	–	ibm
Circl	CVE-2023-51441	6 Jan 202413:21	–	circl
CNNVD	Apache Axis 代码问题漏洞	6 Jan 202400:00	–	cnnvd
CNVD	Apache Axis Code Issue Vulnerability	11 Jan 202400:00	–	cnvd
CVE	CVE-2023-51441	6 Jan 202411:59	–	cve
Cvelist	CVE-2023-51441 Apache Axis 1.x (EOL) may allow SSRF when untrusted input is passed to the service admin HTTP API	6 Jan 202411:59	–	cvelist

Vulners

Node

axis axis_osRange≤1.3maven

OR

org.apache.axis axisRange≤1.3maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-51441
github	www.github.com/apache/axis-axis1-java/commit/685c309febc64aa393b2d64a05f90e7eb9f73e06
lists	www.lists.apache.org/thread/8nrm5thop8f82pglx4o0jg8wmvy6d9yd
github	www.github.com/advisories/GHSA-hr2c-p8rh-238h

14 Mar 2024 21:57Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.2

EPSS0.01213

SSVC

apache axis ssrf input validation vulnerability eol