CVE-2025-23184

Katalog CVE

CVSS 7.5 · High EPSS 2,1%

Kerentanan Uncontrolled Resource Consumption pada apache cxf. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the CachedOutputStream instances may not be closed and, if backed by temporary files, may fill up the file system (it applies to servers and clients).

Rincian

Terbit di NVD

21 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

2,1% peluang dieksploitasi; lebih tinggi dari 81,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.apache.org/thread/lfs8l63rnctnj2skfrxyys7v8fgnt122 mailing list
• http://www.openwall.com/lists/oss-security/2025/01/20/3 mailing list
• https://security.netapp.com/advisory/ntap-20250214-0003/
• https://www.vicarius.io/vsociety/posts/cve-2025-23184-detect-apache-cxf-vulnerability
• https://www.vicarius.io/vsociety/posts/cve-2025-23184-mitigate-apache-cxf-vulnerability