CVE-2024-29736 | Apache CXF up to 3.5.8/3.6.3/4.0.4 WADL Stylesheet server-side request forgery

A vulnerability was found in Apache CXF up to 3.5.8/3.6.3/4.0.4. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WADL Stylesheet Handler. The manipulation leads to server-side request forgery.

This vulnerability is known as CVE-2024-29736. The attack needs to be approached within the local network. There is no exploit available.

It is recommended to upgrade the affected component.