Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-23184

A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the CachedOutputStream instances may not be closed and, if backed by temporary files, may fill up the file system (it applies to servers and clients).

Published

2025-01-21T10:15:08.110

Last Modified

2025-02-15T01:15:11.010

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-400
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application apache cxf < 3.5.10 Yes
Application apache cxf < 3.6.5 Yes
Application apache cxf < 4.0.6 Yes
References