VulnerableCode Package Details - pkg:maven/org.apache.cxf/apache-cxf@2.5

Search for packages

Package details: pkg:maven/org.apache.cxf/apache-cxf@2.5

Essentials
History (2)

purl	pkg:maven/org.apache.cxf/apache-cxf@2.5
Tags	Ghost

Next non-vulnerable version	3.3.11
Latest non-vulnerable version	3.4.4
Risk	10.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-su1r-fv61-aaap Aliases: CVE-2013-2160 GHSA-254q-rp36-v2m8	Denial of Service Attacks on Apache CXF The streaming XML parser in this package remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of elements, attributes, nested constructs, and possibly other vectors.	2.5.10 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 2.6.6-jbossorg-1 Affected by 0 other vulnerabilities. 2.6.7 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 2.7.4 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-su1r-fv61-aaap
Aliases:
CVE-2013-2160
GHSA-254q-rp36-v2m8

Denial of Service Attacks on Apache CXF The streaming XML parser in this package remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of elements, attributes, nested constructs, and possibly other vectors.

2.5.10
Affected by 7 other vulnerabilities.

2.6.6-jbossorg-1
Affected by 0 other vulnerabilities.

2.6.7
Affected by 7 other vulnerabilities.

2.7.4
Affected by 7 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2024-09-17T22:37:37.292896+00:00	GitLab Importer	Affected by	VCID-su1r-fv61-aaap	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/apache-cxf/CVE-2013-2160.yml	34.0.1
2024-01-03T18:00:31.254427+00:00	GitLab Importer	Affected by	VCID-su1r-fv61-aaap	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/apache-cxf/CVE-2013-2160.yml	34.0.0rc1