CVE-2024-29736: Apache CXF: SSRF vulnerability via WADL stylesheet parameter
A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only applies if a custom stylesheet parameter is configured.
Other sources
Apache CXF is vulnerable to server-side request forgery, caused by improper validation of WADL stylesheet parameter. By sending a specially crafted request, an attacker could exploit this vulnerability to conduct SSRF attack.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29736?
CVE-2024-29736 is classified as a high-severity SSRF vulnerability affecting specific versions of Apache CXF.
How do I fix CVE-2024-29736?
To fix CVE-2024-29736, upgrade Apache CXF to at least version 3.5.9, 3.6.4, or 4.0.5.
What versions of Apache CXF are affected by CVE-2024-29736?
CVE-2024-29736 affects Apache CXF versions prior to 3.5.9, 3.6.4, and 4.0.5.
What type of attack does CVE-2024-29736 allow?
CVE-2024-29736 allows attackers to execute Server-Side Request Forgery (SSRF) attacks on REST web services.
Is a custom stylesheet parameter required for CVE-2024-29736 to be exploited?
Yes, CVE-2024-29736 can only be exploited if a custom stylesheet parameter is configured.