Description
A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type.
Remediation
References
https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1&modificationDate=1670944472739&api=v2
Related Vulnerabilities
CVE-2019-10367 Vulnerability in maven package io.jenkins:configuration-as-code
CVE-2020-35460 Vulnerability in maven package net.sf.mpxj:mpxj
CVE-2020-2291 Vulnerability in maven package org.jenkins-ci.plugins:couchdb-statistics
CVE-2023-36665 Vulnerability in maven package org.webjars.npm:protobufjs
CVE-2019-6588 Vulnerability in maven package com.liferay:com.liferay.captcha.taglib