Lucene search
+L

3 matches found

Prion
Prion
added 2023/09/05 3:15 p.m.39 views

Design/Logic Flaw

UNSUPPPORTED WHEN ASSIGNED UNSUPPORTED WHEN ASSIGNED When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API...

7.5CVSS9.4AI score0.02564EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/09/05 2:42 p.m.42 views

CVE-2023-40743 Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService

UNSUPPORTED WHEN ASSIGNED When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose...

9.6AI score0.02564EPSS
SaveExploits0References3
OSV
OSV
added 2023/09/05 2:42 p.m.34 views

CVE-2023-40743 Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService

UNSUPPORTED WHEN ASSIGNED When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose...

9.8CVSS7AI score0.02564EPSS
SaveExploits0References5
Rows per page
Query Builder