1 matches found
GHSA-QP3F-RVJ8-46C8 Apache CXF JNDI Injection vulnerability in DispatchMDBMessageListenerImpl
A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code execution, if an attacker is able to manipulate the JCA deployment descriptor ra.xml or runtime activation parameters. Users are recommended to upgrade to versions 4.2.2 or 4.1.7,...
9.8CVSS5.5AI score0.00858EPSS
SaveExploits0References8
20