Search for packages
| purl | pkg:maven/org.apache.axis/axis@1.3 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-24xc-gnxw-5qhq
Aliases: CVE-2023-51441 GHSA-hr2c-p8rh-238h |
Apache Axis Improper Input Validation vulnerability ** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin service to perform possible SSRF. This issue affects Apache Axis through 1.3. As Axis 1 has been EOL, we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java. Alternatively you could use a build of Axis with the patch from https://github.com/apache/axis-axis1-java/commit/685c309febc64aa393b2d64a05f90e7eb9f73e06 applied. The Apache Axis project does not expect to create an Axis 1.x release fixing this problem, though contributors that would like to work towards this are welcome. |
Affected by 5 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T16:04:18.031262+00:00 | GHSA Importer | Affected by | VCID-24xc-gnxw-5qhq | https://github.com/advisories/GHSA-hr2c-p8rh-238h | 38.0.0 |
| 2026-04-01T12:52:22.118635+00:00 | GitLab Importer | Affected by | VCID-24xc-gnxw-5qhq | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.axis/axis/CVE-2023-51441.yml | 38.0.0 |