Threats tagged 'ghsa-f8p7-h97q-7vx7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2026-50629Apache CXF · CRLF Injection Medium5.3EPSS 0.4%2026-06-12CVE Database V5CVE-2026-50629 CVE-2026-50629 is a medium severity vulnerability in Apache CXF where the 'clientId' parameter from HTTP requests is directly concatenated into OAuth2 server log warning messages without sanitizing control characters. This improper neutralization of CRLF sequences allows attackers to inject arbitrary content, including fake log entries, into server logs. The issue is fixed in Apache CXF versions 4.2.2, 4.1.7, and 3.6.12. EPSS 0.4%Vulnerability Apache Software Foundation CWE-93 #ghsa-f8p7-h97q-7vx7	CVE Database V5	2026-06-12

Page 1 of 1