CVE-2025-23184
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Published Jan 21, 2025
CWE ID 400
Summary
CVE-2025-23184 is a denial-of-service vulnerability affecting Apache CXF versions before 3.5.10, 3.6.5, and 4.0.6. In specific use cases, CachedOutputStream instances may fail to close properly, leading to potential file system exhaustion. This issue poses a risk to both servers and clients.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Apache CXF
Affected Vendors
- Apache Software Foundation