CVE-2023-51441

** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin service to perform possible SSRF This issue affects Apache Axis: through 1.3. As Axis 1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java. Alternatively you could use a build of Axis with the patch from https://github.com/apache/axis-axis1-java/commit/685c309febc64aa393b2d64a05f90e7eb9f73e06 applied. The Apache Axis project does not expect to create an Axis 1.x release fixing this problem, though contributors that would like to work towards this are welcome.

• CWE-918
• CWE-918

• https://github.com/apache/axis-axis1-java/commit/685c309febc64aa393b2d64a05f90e7eb9f73e06Patch
• https://lists.apache.org/thread/8nrm5thop8f82pglx4o0jg8wmvy6d9ydPatch, Third Party Advisory
• https://github.com/apache/axis-axis1-java/commit/685c309febc64aa393b2d64a05f90e7eb9f73e06Patch
• https://lists.apache.org/thread/8nrm5thop8f82pglx4o0jg8wmvy6d9ydPatch, Third Party Advisory

Published

Jan 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-51436Cross-site scripting vulnerability exists in UNIVERSAL PASSP…5.9
• CVE-2023-51437Observable timing discrepancy vulnerability in Apache Pulsar…7.4
• CVE-2023-51438A vulnerability has been identified in SIMATIC IPC1047E (All…9.8
• CVE-2023-51439A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2023-5144** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was c…8.8
• CVE-2023-51440A vulnerability has been identified in SIMATIC CP 343-1 (6GK…7.5
• CVE-2023-51442Navidrome is an open source web-based music collection serve…8.6
• CVE-2023-51443FreeSWITCH is a Software Defined Telecom Stack enabling the …5.9
• CVE-2023-51444GeoServer is an open source software server written in Java …7.2
• CVE-2023-51445GeoServer is an open source software server written in Java …4.8
• CVE-2023-51446GLPI is a Free Asset and IT Management Software package. Whe…8.1
• CVE-2023-51447Decidim is a participatory democracy framework. Starting in …5.4