Lucene search
+L

2 matches found

OSV
OSV
added 2023/09/05 3:30 p.m.43 views

GHSA-RMQP-9W4C-GC7W Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService

When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose the application to DoS, SS...

9.8CVSS7.1AI score0.02564EPSS
SaveExploits0References5
Rows per page
Query Builder