News · via oss-security
CVE-2026-123779: Apache Axis2/Java: exposeServiceMetadata not enforced on all metadata routes
Posted by Robert Lazarski on Nov 06 Severity: low Affected versions: - Apache Axis2/Java before 2.0.2 - Apache Axis2/Java before 2.0.2 Description: Direct Request ('Forced Browsing') vulnerability in…