[FC-228] [fortress-rest] CVE-2017-12624: Apache CXF web services that process attachments are vulnerable to Denial of Service (DoS) attacks

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.0.1
• Assignee: Shawn McKinney
• Reporter: Shawn McKinney
• Created: 14/Nov/17 15:20
• Updated: 16/Nov/17 01:52
• Resolved: 16/Nov/17 01:52

Description

per described here: http://cxf.apache.org/security-advisories.data/CVE-2017-12624.txt.asc

upgrade CXF:
<cxf.version>3.2.1</cxf.version>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
<version>3.2.1</version>
</dependency>