Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTMzNTctODI5eC1tOXBy

Apache CXF Fediz application plugins are vulnerable to Denial of Service (DoS) attacks

Application plugins in Apache CXF Fediz prior to version 1.1.3 and 1.2.x prior to 1.2.1 allow remote attackers to create a denial of service.

Permalink: https://github.com/advisories/GHSA-3357-829x-m9pr
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTMzNTctODI5eC1tOXBy
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: about 6 years ago
Updated: about 1 year ago


CVSS Score: 7.5
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Identifiers: GHSA-3357-829x-m9pr, CVE-2015-5175
References: Repository: https://git-wip-us.apache.org/repos/asf/cxf-fediz
Blast Radius: 6.8

Affected Packages

maven:org.apache.cxf.fediz:fediz-core
Dependent packages: 30
Dependent repositories: 8
Downloads:
Affected Version Ranges: >= 1.2, < 1.2.1, < 1.1.3
Fixed in: 1.2.1, 1.1.3
All affected versions: 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.1.0, 1.1.1, 1.1.2, 1.2.0
All unaffected versions: 1.1.3, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6, 1.5.0, 1.5.1, 1.6.0, 1.6.1, 1.6.2, 1.7.0
maven:org.apache.cxf.fediz:fediz-idp
Dependent packages: 1
Dependent repositories: 3
Downloads:
Affected Version Ranges: >= 1.2, < 1.2.1, < 1.1.3
Fixed in: 1.2.1, 1.1.3
All affected versions: 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.1.0, 1.1.1, 1.1.2, 1.2.0
All unaffected versions: 1.1.3, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6, 1.5.0, 1.5.1, 1.6.0, 1.6.1, 1.6.2, 1.7.0