CVE-2022-46364-poc

CVE-2022-46364 — Apache CXF XOP:Include SSRF / LFI 作者： 0xmid00 漏洞： MTOM 请求中通过 XOP:Include 实现 SSRF / 本地文件读取 影响： Apache CXF false test IT john 该利用工具会自动将其转换为 MTOM 格式——您无需手动操作。 示例 模式 1 — 自动检测所有可注入字段 root@kitploit: python3 exp...

CVE-2022-46364

A SSRF vulnerability was found in Apache CXF. This issue occurs when parsing the href attribute of XOP:Include in MTOM requests, allowing an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type...

Server-side Request Forgery (SSRF)

cxf-core is vulnerable to Server-side Request Forgery SSRF. The vulnerability exists due to the lack of URL encode in MTOM content-id, which allows an attacker to perform SSRF-style attacks on web services that take at least one parameter of any type through the href attribute of XOP:Include...

Apache CXF Server-Side Request Forgery vulnerability

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type...