Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the checkFailure function in the CXF SOAP consumer. An external caller can read internal class and package names and exception messages by sending a SOAP request that triggers an undeclared route failure; if CXF...