CVE-2023-40743
2 advisories.
Maven/org.apache.axis:axis CVE-2023-40743: critical 9.8
Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-rmqp-9w4c-gc7w
- https://nvd.nist.gov/vuln/detail/CVE-2023-40743
- https://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210
- https://github.com/apache/axis-axis1-java
- https://lists.apache.org/thread/gs0qgk2mgss7zfhzdd6ftfjvm4kp7v82
- https://lists.debian.org/debian-lts-announce/2023/10/msg00025.html
CVE-2023-40743 · published · modified · JSON
Maven/axis:axis CVE-2023-40743: critical 9.8
Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-rmqp-9w4c-gc7w#Maven/axis:axis
- https://nvd.nist.gov/vuln/detail/CVE-2023-40743
- https://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210
- https://github.com/apache/axis-axis1-java
- https://lists.apache.org/thread/gs0qgk2mgss7zfhzdd6ftfjvm4kp7v82
- https://lists.debian.org/debian-lts-announce/2023/10/msg00025.html
CVE-2023-40743 · published · modified · JSON