{"action":"Upgrade org.apache.cxf:apache-cxf to 3.3.10 (3.3.x) or 3.4.3 (3.4.x) or later.","affected":[{"fixed":"3.4.3","introduced":"3.4.0"},{"fixed":"3.3.10","introduced":"0"}],"component":"org.apache.cxf:apache-cxf","cve_ids":["CVE-2021-22696"],"ecosystem":"Maven","epss":0.06593,"exploited":false,"fixed_versions":["3.4.3","3.3.10"],"ghsa_id":"GHSA-7q4h-pj78-j7vg","id":"tcs_01M5N8JWSTP9QYS2CHK9JWHP3K","modified_at":"2023-11-08T04:05:01.015432Z","published_at":"2021-05-13T22:31:05Z","references":["https://osv.dev/vulnerability/GHSA-7q4h-pj78-j7vg","https://nvd.nist.gov/vuln/detail/CVE-2021-22696","https://github.com/apache/cxf/commit/40503a53914758759894f704bbf139ae89ace286","https://github.com/apache/cxf/commit/aa789c5c4686597a7bdef2443909ab491fc2bc04","https://cxf.apache.org/security-advisories.data/CVE-2021-22696.txt.asc","https://github.com/apache/cxf","https://lists.apache.org/thread.html/r6445001cc5f9a2bb1e6316993753306e054bdd1d702656b7cbe59045@%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/r8651c06212c56294a1c0ea61a5ad7790c06502209c03f05c0c7c9914@%3Cdev.cxf.apache.org%3E","https://lists.apache.org/thread.html/r8651c06212c56294a1c0ea61a5ad7790c06502209c03f05c0c7c9914@%3Cusers.cxf.apache.org%3E","https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html","http://www.openwall.com/lists/oss-security/2021/04/02/2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7q4h-pj78-j7vg#Maven/org.apache.cxf:apache-cxf","url":"https://osv.dev/vulnerability/GHSA-7q4h-pj78-j7vg"}],"summary":"Authorization service vulnerable to DDos attacks in Apache CFX"}