ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +891 more potentially affected by CVE-2017-5653 via org.apache.cxf:cxf-core (>=3.0.0-milestone1, <=3.0.12)

org.apache.cxf:cxf-core MAVEN version =3.0.0-milestone1, =1.0.0, =11.4-37, =3.6.1, =3.11.0, =1.0.0, =0.0.1, =0.0.22 - com.argusoft:medplatlms 0.0.1 and more Source cves: CVE-2017-5653 Source advisory: GHSA-HGG6-8X62-M9GF...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +891 more potentially affected by CVE-2017-5653 via org.apache.cxf:cxf-core (>=3.0.0-milestone1, <=3.0.12)

org.apache.cxf:cxf-core MAVEN version =3.0.0-milestone1, =1.0.0, =11.4-37, =3.6.1, =3.11.0, =1.0.0, =0.0.1, =0.0.22 - com.argusoft:medplatlms 0.0.1 and more Source cves: CVE-2017-5653 Source advisory: OSV:GHSA-HGG6-8X62-M9GF...

ai.mattmann.mnemosyne:cas-product (>=1.11.0, <=1.13.8), ai.mattmann.mnemosyne:pcs-services (>=1.12.0, <=1.13.8) +843 more potentially affected by CVE-2017-5653 via org.apache.cxf:cxf-core (>=3.1.0, <=3.1.10)

org.apache.cxf:cxf-core MAVEN version =3.1.0, =1.11.0, =1.12.0, =1.2.18, =6.2.0.5, =6.2.0.6, =1.0.0, =3.13, =1.0.0, =1.0.4 and more Source cves: CVE-2017-5653 Source advisory: GHSA-HGG6-8X62-M9GF...

ai.mattmann.mnemosyne:cas-product (>=1.11.0, <=1.13.8), ai.mattmann.mnemosyne:pcs-services (>=1.12.0, <=1.13.8) +843 more potentially affected by CVE-2017-5653 via org.apache.cxf:cxf-core (>=3.1.0, <=3.1.10)

org.apache.cxf:cxf-core MAVEN version =3.1.0, =1.11.0, =1.12.0, =1.2.18, =6.2.0.5, =6.2.0.6, =1.0.0, =3.13, =1.0.0, =1.0.4 and more Source cves: CVE-2017-5653 Source advisory: OSV:GHSA-HGG6-8X62-M9GF...

CVE-2017-5653

It was found that a flaw exists in JAX-RS clients using the streaming approach for XML signatures and encryption, where it does not enforce the message to be signed/encrypted. This could allow an attacker to subvert the integrity of the message...

CVE-2017-5653

JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers...

CVE-2017-5653

CVE-2017-5653 affects Apache CXF JAX-RS XML Security streaming clients. The root cause is that these clients do not validate that the service response was signed or encrypted, enabling remote attackers to spoof servers. Affected: CXF versions prior to 3.1.11 and 3.0.13. Impact (per public records...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +891 more potentially affected by CVE-2017-5653 via org.apache.cxf:cxf-core (>=3.0.0-milestone1, <=3.0.12)

org.apache.cxf:cxf-core MAVEN version =3.0.0-milestone1, =1.0.0, =11.4-37, =3.6.1, =3.11.0, =1.0.0, =0.0.1, =0.0.22 - com.argusoft:medplatlms 0.0.1 and more Source cves: CVE-2017-5653 Source advisory: MEND:CVE-2017-5653...

ai.mattmann.mnemosyne:cas-product (>=1.11.0, <=1.13.8), ai.mattmann.mnemosyne:pcs-services (>=1.12.0, <=1.13.8) +843 more potentially affected by CVE-2017-5653 via org.apache.cxf:cxf-core (>=3.1.0, <=3.1.10)

org.apache.cxf:cxf-core MAVEN version =3.1.0, =1.11.0, =1.12.0, =1.2.18, =6.2.0.5, =6.2.0.6, =1.0.0, =3.13, =1.0.0, =1.0.4 and more Source cves: CVE-2017-5653 Source advisory: MEND:CVE-2017-5653...