Tracker / CVE-2025-23184
CVE-2025-23184
Medium 5.9
A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the CachedOutputStream instances may not be closed and, if backed by temporary files, may fill up the file system (it applies to servers and clients).
Affected products and versions
| apache | cxf · … → 3.5.10 |
|---|---|
| apache | cxf · 3.6.0 → 3.6.5 |
| apache | cxf · 4.0.0 → 4.0.6 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.