A vulnerability was found in Apache CXF up to 3.5.7/3.6.2/4.0.3. It has been rated as critical. Affected by this issue is some unknown functionality of the component Aegis Databinding. The manipulation leads to server-side request forgery.
This vulnerability is handled as CVE-2024-28752. The attack needs to be initiated within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
