Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3p6r-x275-5x98

Опубликовано: 06 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.

An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.

EPSS

Процентиль: 34%
0.00407
Низкий

7.5 High

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 7.5
nvd
3 дня назад

An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.

EPSS

Процентиль: 34%
0.00407
Низкий

7.5 High

CVSS3

Дефекты

CWE-400