Lucene search
GoogleOSV:GHSA-QMGX-J96G-4428HistoryMar 15, 2024 - 12:30 p.m.
SSRF vulnerability using the Aegis DataBinding in Apache CXF
2024-03-1512:30:37
Google
osv.dev
15
ssrf
apache cxf
aegis databinding
webservices
vulnerability
data binding
A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the default databinding) are not impacted.
Related
osv
osv
CGA-58x7-92cj-h7fv
2024-06-06 12:24:03
CGA-877w-8xxp-xv6m
2024-06-06 12:25:10
vulnrichment
vulnrichment
CVE-2024-28752 Apache CXF SSRF Vulnerability using the Aegis databinding
2024-03-15 10:27:30
nessus
nessus
nvd
nvd
CVE-2024-28752
2024-03-15 11:15:09
cve
cve
CVE-2024-28752
2024-03-15 11:15:09
veracode
veracode
Server-Side Request Forgery (SSRF)
2024-03-18 08:35:48
cvelist
cvelist
CVE-2024-28752 Apache CXF SSRF Vulnerability using the Aegis databinding
2024-03-15 10:27:30
ibm
ibm
github
github
SSRF vulnerability using the Aegis DataBinding in Apache CXF
2024-03-15 12:30:37
cgr
cgr
CVE-2024-28752 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2024-28752
2024-03-21 15:31:52
wolfi
wolfi
CVE-2024-28752 vulnerabilities
2024-10-16 03:12:41
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00