Threats tagged 'ghsa-36wv-v2qp-v4g4'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.6	EPSS 0.7%	CVE-2025-48795Org.apache.cxf:cxf core: Apache CXF is vulnerable to DoS attacks as entire files are read into memory and logged Medium5.6EPSS 0.7%2025-07-15GCVE DatabaseCVE-2025-48795 Apache CXF versions prior to 3.5.11, between 3.6.0 and 3.6.6, between 4.0.0 and 4.0.7, and between 4.1.0 and 4.1.1 have a vulnerability where large temporary files are fully read into memory and logged unencrypted. This can lead to denial of service via out of memory exceptions and exposure of sensitive data in logs. Fixed versions are 3.5.11, 3.6.6, 4.0.7, and 4.1.1. EPSS 0.7%Report on CVE-2025-48795 Vulnerability CWE-400 #ghsa-36wv-v2qp-v4g4 #maven	GCVE Database	2025-07-15

Page 1 of 1