github - ghsa-3w37-5p3p-jv92

ghsa-3w37-5p3p-jv92

Vulnerability from github

Published

2022-12-13 15:30

Modified

2023-09-07 14:48

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

Apache CXF vulnerable to Exposure of Sensitive Information

Details

A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration. The vulnerability only applies when the CXFServlet is configured with both the static-resources-list and redirect-query-check attributes. These attributes are not supposed to be used together, and so the vulnerability can only arise if the CXF service is misconfigured.

Show details on source website

JSON

To clipboard

{
   affected: [
      {
         package: {
            ecosystem: "Maven",
            name: "org.apache.cxf:cxf-core",
         },
         ranges: [
            {
               events: [
                  {
                     introduced: "0",
                  },
                  {
                     fixed: "3.4.10",
                  },
               ],
               type: "ECOSYSTEM",
            },
         ],
      },
      {
         package: {
            ecosystem: "Maven",
            name: "org.apache.cxf:cxf-core",
         },
         ranges: [
            {
               events: [
                  {
                     introduced: "3.5.0",
                  },
                  {
                     fixed: "3.5.5",
                  },
               ],
               type: "ECOSYSTEM",
            },
         ],
      },
   ],
   aliases: [
      "CVE-2022-46363",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-20",
         "CWE-200",
      ],
      github_reviewed: true,
      github_reviewed_at: "2022-12-13T19:26:03Z",
      nvd_published_at: "2022-12-13T15:15:00Z",
      severity: "HIGH",
   },
   details: "A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration. The vulnerability only applies when the CXFServlet is configured with both the static-resources-list and redirect-query-check attributes. These attributes are not supposed to be used together, and so the vulnerability can only arise if the CXF service is misconfigured.",
   id: "GHSA-3w37-5p3p-jv92",
   modified: "2023-09-07T14:48:39Z",
   published: "2022-12-13T15:30:27Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2022-46363",
      },
      {
         type: "PACKAGE",
         url: "https://github.com/apache/cxf",
      },
      {
         type: "WEB",
         url: "https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
         type: "CVSS_V3",
      },
   ],
   summary: "Apache CXF vulnerable to Exposure of Sensitive Information",
}

cve-2022-46363

Vulnerability from cvelistv5

Published

2022-12-13 14:46

Modified

2024-08-03 14:31

Severity ?

Summary

References

▼	URL	Tags
	https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c	vendor-advisory

Impacted products

	Vendor	Product	Version
	Apache Software Foundation	Apache CXF	Version: 3.5 Version: 3.4

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T14:31:45.874Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "Apache CXF",
               vendor: "Apache Software Foundation",
               versions: [
                  {
                     lessThan: "3.5.5",
                     status: "affected",
                     version: "3.5",
                     versionType: "maven",
                  },
                  {
                     lessThan: "3.4.10",
                     status: "affected",
                     version: "3.4",
                     versionType: "maven",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "thanat0s from Beijin Qihoo 360 adlab",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration. The vulnerability only applies when the&nbsp;CXFServlet is configured with both the&nbsp;static-resources-list and&nbsp;redirect-query-check attributes. These attributes are not supposed to be used together, and so the vulnerability can only arise if the CXF service is misconfigured.<br><br>",
                  },
               ],
               value: "A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration. The vulnerability only applies when the CXFServlet is configured with both the static-resources-list and redirect-query-check attributes. These attributes are not supposed to be used together, and so the vulnerability can only arise if the CXF service is misconfigured.\n\n",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     text: "moderate",
                  },
                  type: "Textual description of severity",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-20",
                     description: "CWE-20 Improper Input Validation",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-13T14:48:16.676Z",
            orgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
            shortName: "apache",
         },
         references: [
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c",
            },
         ],
         source: {
            discovery: "EXTERNAL",
         },
         title: "Apache CXF directory listing / code exfiltration",
         x_generator: {
            engine: "Vulnogram 0.1.0-dev",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
      assignerShortName: "apache",
      cveId: "CVE-2022-46363",
      datePublished: "2022-12-13T14:46:55.619Z",
      dateReserved: "2022-12-02T08:07:29.876Z",
      dateUpdated: "2024-08-03T14:31:45.874Z",
      requesterUserId: "cf81350d-439c-4450-9d42-0a054bb6b6c9",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted