apache: cxf: org.apache.cxf:cxf-rt-rs-service-description: SSRF via WADL stylesheet parameter

🗓️ 06 May 2024 14:10:14Reported by RedHatType

redhat🔗 access.redhat.com👁 5 Views

Apache CXF SSRF in WADL service description when a custom stylesheet parameter is set.

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	26 Mar 202504:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Application Dependency Discovery Manager is vulnerable to server-side request forgery due to Apache CXF	21 Oct 202414:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.7.	9 Apr 202514:41	–	ibm
Tenable Nessus	Apache CXF < 3.5.9, 3.6.x < 3.6.4, 4.0.x < 4.0.5 Multiple Vulnerabilities	26 Jul 202400:00	–	nessus
Tenable Nessus	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0.0.5)	15 Jan 202500:00	–	nessus
Tenable Nessus	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0.1)	22 Jul 202500:00	–	nessus
Tenable Nessus	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3)	25 Jun 202500:00	–	nessus
Tenable Nessus	Oracle Business Intelligence Publisher 6.4 / 7.0 (OAS) (October 2024 CPU)	5 Nov 202400:00	–	nessus
BDU FSTEC	The vulnerability of the WADL (Web Application Description Language) technology used in the Apache CXF web service framework allows a attacker to perform an SSRF attack.	2 Aug 202400:00	–	bdu_fstec
Circl	CVE-2024-29736	19 Jul 202412:01	–	circl

Vulners

Node

AND

redhat apache-camel-spring-bootRange<4.4.0

redhat enterprise_linux

Source	Link
access	www.access.redhat.com/security/cve/CVE-2024-29736
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/advisories/GHSA-5m3j-pxh7-455p
lists	www.lists.apache.org/thread/4jtpsswn2r6xommol54p5mg263ysgdw2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-29736
osv	www.osv.dev/vulnerability/GHSA-5m3j-pxh7-455p
cve	www.cve.org/CVERecord

19 Aug 2026 17:26Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5 - 9.1

EPSS0.01029

SSVC

apache rest services stylesheet parameter server side forgery wadl descriptor