Threats tagged 'ghsa-287c-fxr7-3w6c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2026-42404Org.apache.neethi:neethi: Apache Neethi doesn't impose any restrictions on URIs when manually fetching remote policy Medium6.52026-05-01GCVE DatabaseCVE-2026-42404 Apache Neethi versions prior to 3.2.2 do not restrict URIs when manually fetching remote policy references via the PolicyReference API. This allows outbound requests to arbitrary protocols and internal IP addresses. Version 3.2.2 introduces restrictions allowing only http or https URIs and forbids link-local, multicast, and any-local addresses. Users should upgrade to 3.2.2 to address this issue. Report on CVE-2026-42404 Vulnerability CWE-918 #ghsa-287c-fxr7-3w6c #maven	GCVE Database	2026-05-01

Page 1 of 1