Apache CXF 3.6.x < 3.6.4，4.0.x < 4.0.5 DoS

語言:

版本 1.7 Jan 24, 2025, 11:23 AM IAVM reference Plugin Feed: 202501241123
版本 1.6 Oct 23, 2024, 3:47 PM Plugin metadata (update thorough_tests attribute) Plugin Feed: 202410231547
版本 1.5 Oct 7, 2024, 1:27 PM Plugin categorization (adding new 'component' to component plugins) Plugin Feed: 202410071327
版本 1.4 Aug 8, 2024, 9:29 AM CVSS metrics ("CVSSv3 score" set to 7.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202408080929
版本 1.3 Aug 2, 2024, 9:39 AM CVSS metrics ("CVSSv3 score" set to 5.3) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Plugin Feed: 202408020939
版本 1.2 Jul 29, 2024, 7:22 AM Exploit attributes ("Exploit available" set to "False") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin Feed: 202407290722
版本 1.1 Jul 26, 2024, 6:35 PM New Plugin Feed: 202407261835

* Changelogs are generally available for changes made after Nov 1, 2022