Lucene search
Redhat.comRH:CVE-2024-28752HistoryMar 21, 2024 - 3:31 p.m.
CVE-2024-28752
2024-03-2115:31:52
redhat.com
access.redhat.com
91
server-side request forgery
apache cxf
webservices
aegisdatabind
data bindings
vulnerability
update
mitigation
A server-side request forgery (SSRF) vulnerability was found in Apache CXF. This issue occurs in attacks on webservices that take at least one parameter of any type, and when Aegisdatabind is used. Users of other data bindings including the default databinding are not impacted.
Mitigation
No mitigation is currently available for this vulnerability. Please make sure to update as the fixes become available.
Related
cvelist
cvelist
CVE-2024-28752 Apache CXF SSRF Vulnerability using the Aegis databinding
2024-03-15 10:27:30
github
github
SSRF vulnerability using the Aegis DataBinding in Apache CXF
2024-03-15 12:30:37
ibm
ibm
osv
osv
SSRF vulnerability using the Aegis DataBinding in Apache CXF
2024-03-15 12:30:37
nessus
nessus
nvd
nvd
CVE-2024-28752
2024-03-15 11:15:09
cve
cve
CVE-2024-28752
2024-03-15 11:15:09
veracode
veracode
Server-Side Request Forgery (SSRF)
2024-03-18 08:35:48
cgr
cgr
CVE-2024-28752 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2024-28752 vulnerabilities
2024-06-22 09:08:24
