Lucene search
+L

1 matches found

OSV
OSV
added 2025/08/08 9:21 a.m.14 views

CVE-2025-48913 Apache CXF: Untrusted JMS configuration can lead to RCE

If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code execution capabilities. This interface is now restricted to reject those protocols, removing this possibility. Users are recommended to upgrade to versions 3.6.8...

9.8CVSS7.4AI score0.00793EPSS
SaveExploits0References4
Rows per page
Query Builder