CVE-2022-46364

CVE-2022-46364 — Apache CXF MTOM/XOP SSRF Lecture de fichier Preuve de concept pour CVE-2022-46364 — une vulnérabilité de falsification de requête côté serveur SSRF dans Apache CXF lors du traitement des requêtes MTOM/XOP. Résumé de la vulnérabilité CVE-2022-46364 affecte les versions d'Apache CX...

CVE-2026-107937

In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size default 300 characters and attachment-headers-max-count default 500 limits. The size limit was applied only to each physical line, not to a header value built from...

CVE-2026-107937 Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion.

In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size default 300 characters and attachment-headers-max-count default 500 limits. The size limit was applied only to each physical line, not to a header value built from...

EUVD-2026-95702

In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size default 300 characters and attachment-headers-max-count default 500 limits. The size limit was applied only to each physical line, not to a header value built from...

CVE-2026-107937

A vulnerability in Apache CXF allows a remote, unauthenticated attacker to cause a denial of service through memory exhaustion . The issue stems from the multipart/MTOM attachment part header parser failing to fully enforce attachment-max-header-size and attachment-headers-max-count limits. Speci...

CVE-2022-46364-htb-ctf

Outil d'exploitation SOAP DevArea CVE-2022-46364 Description Cet exploit spécialisé cible l'environnement DevArea sur Hack The Box. Il exploite une vulnérabilité critique dans Apache CXF 3.2.14 CVE-2022-46364 pour effectuer une inclusion locale de fichiers LFI et une falsification de requête côté...

PT-2026-108811

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description The parser for multipart/MTOM attachment part headers fails to strictly enforce the attachment-max-header-size and...

CVE-2022-46364-Proof-of-the-concept

CVE-2022-46364 : Exploitation SSRF vers LFI via XOP:Include dans Apache CXF MTOM ⚠️ AVERTISSEMENT CET OUTIL EST UNIQUEMENT DESTINÉ À DES TESTS DE SÉCURITÉ ÉDUCATIFS ET AUTORISÉS Ce proof-of-concept est fourni à des fins éducatives pour aider les professionnels de la sécurité à comprendre la...

CVE-2022-46364-Poc

Exploit CVE-2022-46364 Apache CXF SSRF via MTOM XOP:Include | CVSS 9.8 CRITIQUE Vulnérabilité Apache CXF -s -d -t, --target - Point de terminaison SOAP CXF vulnérable obligatoire -s, --ssrf-url - URL interne à exfiltrer obligatoire -d, --domain - Domaine cible par défaut : localhost --plain-soap...

CVE-2022-46364-poc

CVE-2022-46364 — Apache CXF XOP:Include SSRF / LFI Auteur : 0xmid00 Vulnérabilité : SSRF / Lecture de fichier local via XOP:Include dans les requêtes MTOM Affecté : Apache CXF 3.5.5 et 3.4.10 Quelle est la vulnérabilité ? Apache CXF traite les messages MTOM Message Transmission Optimization...

Exploit for Server-Side Request Forgery in Apache Cxf

CVE-2022-46364 — Apache CXF MTOM/XOP SSRF File Read Proof...

Exploit for Server-Side Request Forgery in Apache Cxf

DevArea SOAP Exploitation Tool CVE-2022-46364 Descripti...

Exploit for Server-Side Request Forgery in Apache Cxf

CVE-2022-46364 Exploit Apache CXF SSRF via MTOM XOP:Include |...

EUVD-2022-7768

Malicious code in bioql PyPI...

CXF: SSRF Vulnerability

A SSRF vulnerability was found in Apache CXF. This issue occurs when parsing the href attribute of XOP:Include in MTOM requests, allowing an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type...

CXF: SSRF Vulnerability

A SSRF vulnerability was found in Apache CXF. This issue occurs when parsing the href attribute of XOP:Include in MTOM requests, allowing an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type...

CXF: SSRF Vulnerability

A SSRF vulnerability was found in Apache CXF. This issue occurs when parsing the href attribute of XOP:Include in MTOM requests, allowing an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type...

Security Bulletin: IBM Liberty for Java for IBM Cloud is vulnerable to server-side request forgery due to Apache CXF (CVE-2022-46364)

Summary There is a vulnerability in the Apache CXF library used by IBM Liberty for Java for IBM Cloud with the jaxws-2.2 feature enabled. This has been addressed. Vulnerability Details CVEID:CVE-2022-46364 DESCRIPTION: Apache CXF is vulnerable to server-side request forgery, caused by a flaw in...

CXF: SSRF Vulnerability

A SSRF vulnerability was found in Apache CXF. This issue occurs when parsing the href attribute of XOP:Include in MTOM requests, allowing an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type...

CXF: SSRF Vulnerability

A SSRF vulnerability was found in Apache CXF. This issue occurs when parsing the href attribute of XOP:Include in MTOM requests, allowing an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type...