The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL addresses of the available service endpoints. The module calculates the base URL using the current HttpServletRequest. The calculated base URL is used by FormattedServiceListWriter to build the service endpoint absolute URLs. If the unexpected matrix parameters have been injected into the request URL then these matrix parameters will find their way back to the client in the services list page which represents an XSS risk to the client.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses
    FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL addresses of the
    available service endpoints. The module calculates the base URL using the current HttpServletRequest. The
    calculated base URL is used by FormattedServiceListWriter to build the service endpoint absolute URLs. If
    the unexpected matrix parameters have been injected into the request URL then these matrix parameters will
    find their way back to the client in the services list page which represents an XSS risk to the client.
    (CVE-2016-6812)

fixes CVE-2016-6812 CVE-2016-8739 (rhbz#1406810,1406811,1406813)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
419564	SCA: security update for org.apache.cxf:cxf-core (GHSA-vw2c-5wph-v92r)	Tenable Cloud Security	SCA Checks	medium
419564	SCA: security update for org.apache.cxf:cxf-core (GHSA-vw2c-5wph-v92r)	Tenable Self-Hosted Container Security	SCA Checks	medium
96199	Fedora 25 : 1:cxf (2016-2361e1e07a)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2016-6812

medium

Tenable Plugins

medium

medium

high