CVE-2024-29736
Last modified
CVE-2024-29736 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only applies if a custom stylesheet parameter is configured.. EPSS estimates a 1.03% chance of exploitation in the next 30 days.
Description
A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only applies if a custom stylesheet parameter is configured.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Cxf | < 3.5.9 |
| Apache | Cxf | >= 3.6.0, < 3.6.4 |
| Apache | Cxf | >= 4.0.0, < 4.0.5 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-29736?
How severe is CVE-2024-29736?
How do I fix CVE-2024-29736?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-29730SQL injection vulnerabilities in SportsNET affecting version…9.8
- CVE-2024-29731SQL injection vulnerabilities in SportsNET affecting version…9.8
- CVE-2024-29732A SQL Injection has been found on SCAN_VISIO eDocument Suite…9.8
- CVE-2024-29733Improper Certificate Validation vulnerability in Apache Airf…2.7
- CVE-2024-29734Uncontrolled search path element issue exists in SonicDICOM …7.8
- CVE-2024-29735Improper Preservation of Permissions vulnerability in Apache…5.3
- CVE-2024-29737In streampark, the project module integrates Maven's compila…4.7
- CVE-2024-29738In gov_init, there is a possible out of bounds read due to a…5.5
- CVE-2024-29739In tmu_get_temp_lut of tmu.c, there is a possible out of bou…5.5
- CVE-2024-2974The Essential Addons for Elementor – Best Elementor Template…5.3
- CVE-2024-29740In tmu_set_table of tmu.c, there is a possible out of bounds…7.4
- CVE-2024-29741In pblS2mpuResume of s2mpu.c, there is a possible mitigation…7.8
Are you affected by CVE-2024-29736?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST