https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:51:40.799815+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-46363 CVE-2022-46363 — Apache CXF directory listing / code exfiltration 2026-10-06T15:51:40.824482+00:00

Affected: Apache Software Foundation Apache CXF

A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration. The vulnerability only applies when the CXFServlet is configured with both the static-resources-list and redirect-query-check attributes. These attributes are not supposed to be used together, and so the vulnerability can only arise if the CXF service is misconfigured.