CVE-2024-29736

A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only applies if a custom stylesheet parameter is configured.
SSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
apacheCNA
---
---
CISA-ADPADP
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
VendorProductVersion
apachecxf
𝑥
< 3.5.9
apachecxf
3.6.0 ≤
𝑥
< 3.6.4
apachecxf
4.0.0 ≤
𝑥
< 4.0.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://lists.apache.org/thread/4jtpsswn2r6xommol54p5mg263ysgdw2
http://www.openwall.com/lists/oss-security/2024/07/18/2
https://lists.apache.org/thread/4jtpsswn2r6xommol54p5mg263ysgdw2
https://security.netapp.com/advisory/ntap-20241115-0003/