CVE-2022-46364
Apache CXF SSRF Vulnerability
A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Apache Software Foundation · Apache CXFpublic PoCs found — 5
githubgithub.com/kasem545/CVE-2022-46364-Poc★ 7githubgithub.com/cybermaksx/CVE-2022-46364-Proof-of-the-concept★ 2githubgithub.com/Shashivanth009/CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC★ 1githubgithub.com/0xmid00/CVE-2022-46364-poc★ 1githubgithub.com/jwsly12/CVE-2022-46364-htb-ctf★ 1⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →