DESCRIPTION: Apache CXF is vulnerable to server-side request forgery, caused by a flaw in parsing the href attribute of XOP:Include in MTOM requests.By using a specially-crafted request, an attacker could exploit this vulnerability to conduct SSRF attack.
...