CVE-2017-7662

HIGH

Apache CXF Fediz <1.4.0-1.3.2 - CSRF

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2017-7662. PoCs published by dawetmaster, andikahilmy.

AI-analyzed exploit summary This repository contains vulnerable code from Apache CXF Fediz, specifically demonstrating CVE-2017-7662, which involves improper handling of security tokens. The provided Java files include examples of federation services that process and display user claims and tokens, which could be exploited for unauthorized access or information disclosure.

Description

Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF (Cross Style Request Forgery) style vulnerability has been found in this web application in Apache CXF Fediz prior to 1.4.0 and 1.3.2, meaning that a malicious web application could create new clients, or reset secrets, etc, after the admin user has logged on to the client registration service and the session is still active.

Exploits (2)

nomisec WORKING POC
by dawetmaster · poc
https://github.com/dawetmaster/CVE-2017-7662-cxf-fediz-vulnerable

This repository contains vulnerable code from Apache CXF Fediz, specifically demonstrating CVE-2017-7662, which involves improper handling of security tokens. The provided Java files include examples of federation services that process and display user claims and tokens, which could be exploited for unauthorized access or information disclosure.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target: Apache CXF Fediz (versions affected by CVE-2017-7662)
No auth needed
Prerequisites: Access to a vulnerable Apache CXF Fediz instance · Ability to send crafted requests to the federation service
devstral-2 · analyzed Mar 14, 2026 Full analysis →
nomisec WORKING POC
by andikahilmy · poc
https://github.com/andikahilmy/CVE-2017-7662-cxf-fediz-vulnerable

This repository contains vulnerable code from Apache CXF Fediz, demonstrating CVE-2017-7662, which involves improper handling of SAML tokens leading to authentication bypass. The provided Java files include vulnerable FederationService implementations that process SAML tokens without proper validation.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target: Apache CXF Fediz (versions prior to fix for CVE-2017-7662)
No auth needed
Prerequisites: Access to a vulnerable Apache CXF Fediz instance · Ability to craft malicious SAML tokens
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Scores

CVSS v3 8.8
EPSS 0.0099
EPSS Percentile 77.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-352
Status published
Products (4)
apache/cxf_fediz 1.4.0
apache/cxf_fediz < 1.3.2
Apache Software Foundation/Apache CXF Fediz prior to 1.4.0, 1.3.2 and 1.2.4.
org.apache.cxf.fediz/fediz-oidc 0 - 1.3.2Maven
Published May 16, 2017
Tracked Since Feb 18, 2026