[GHSA-wwq7-pxwc-p4rc] Improper Input Validation in Apache Axis2

[AndrzejBiernacki2010]

Updates

• Affected products

Comments
axis-2 is an aggregator only. The vulnerability is in axis2-transport-http module - the HTTP/HTTPS transport implementation for Axis2.

[shelbyc]

Hi @AndrzejBiernacki2010, do you have a reference link, such as a code or fix commit link, to support changing the affected product from org.apache.axis2:axis2 to org.apache.axis2:axis2-transport-http? Having a public link to back up the change would be helpful.

[AndrzejBiernacki2010]

no. I dont.

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

[AndrzejBiernacki2010]

axis2 is an aggregator. The code is in axis2-http-tansport.
Axis2 HTTP transport, handles the sending and receiving of SOAP messages over HTTP. In particular, the AxisServletListener class is responsible for processing HTTP requests in the Axis2 server.
Source: https://axis.apache.org/axis2/java/core/docs/http-transport.html?utm_source=chatgpt.com

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.