CVE-2025-23184 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the CachedOutputStream inst…
Medium CVSS: 5.9

CVE-2025-23184

A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the CachedOutputStream instances may not be closed and, if backed by temporary files, may fill up the file system (it applies to servers and clients).
Vendor
Apache
Product
Cxf
CWE
CWE-400
Yayın Tarihi
2025-01-21 10:15:08
Güncelleme
2025-12-15 16:15:52
Source Identifier
security@apache.org
KEV Date Added
-

Kategoriler

CWE-400 Cxf MEDIUM Apache 2025

Referanslar

https://lists.apache.org/thread/lfs8l63rnctnj2skfrxyys7v8fgnt122 http://www.openwall.com/lists/oss-security/2025/01/20/3 https://security.netapp.com/advisory/ntap-20250214-0003/ https://www.vicarius.io/vsociety/posts/cve-2025-23184-detect-apache-cxf-vulnerability https://www.vicarius.io/vsociety/posts/cve-2025-23184-mitigate-apache-cxf-vulnerability