CVE-2024-29736

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only applies if a custom stylesheet parameter is configured.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-918

Affected software

No affected versions have been published.

Timeline

Published
Jul 19, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-297374.7In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackCVE-2024-297385.5In gov_init, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no aCVE-2024-297395.5In tmu_get_temp_lut of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disCVE-2024-29745.3The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to SeCVE-2024-297407.4In tmu_set_table of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priCVE-2024-297417.8In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead to local escalation ofCVE-2024-297425.5In apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local informCVE-2024-297437.7In tmu_set_temp_lut of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of CVE-2024-297445.5In tmu_get_gov_time_windows, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discCVE-2024-297455.5there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional exeCVE-2024-297468.4In lpm_req_handler of lpm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation oCVE-2024-297475.9In _dvfs_get_lv of dvfs.c, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosu
CVE-2024-29736: Critical severity, CVSS 9.1 | Vulnix