Threats tagged 'ghsa-g5v7-jchf-7jrr'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.7%	CVE-2026-50628Apache CXF · Improper Input Validation Critical9.8EPSS 0.7%2026-06-12CVE Database V5CVE-2026-50628 A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly allowing requests from any other IP address. Enabling this security feature inadvertently creates an inverse security check. Users are recommended to upgrade to versions 4.2.2 or 4.1.7 or 3.6.12, which fixes this issue. EPSS 0.7%Vulnerability Apache Software Foundation CWE-20 #ghsa-g5v7-jchf-7jrr	CVE Database V5	2026-06-12

Page 1 of 1