Page History

...

Apache CXF™ is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI.

News

...

March 30, 2020 - Apache CXF 3.3.

...

6 and 3.2.

...

13 released!

The Apache CXF team is proud to announce the availability of our latest patch releases!  Over 30 JIRA issues were fixed for 3.3.56, many back ported to 3.2.12.

These releases contain fixes for two new security advisories:

...

13.

Downloads are available here.

...

January 15,

...

2020 - Apache CXF 3.3.

...

5 and 3.2.

...

12 released!

The Apache CXF team is proud to announce the availability of our latest patch releases!  Over 21 30 JIRA issues were fixed for 3.3.45, many back ported to 3.2.1112.

Downloads are available here.

Two new CVEs are fixed in these latest releasesThese releases contain fixes for two new security advisories:

• CVE-2019-1241917573: Apache CXF OpenId Connect token service does not properly validate the clientIdReflected XSS in the services listing page
• CVE-2019-1240612423: Apache CXF does not restrict the number of message attachmentsOpenId Connect JWK Keys service returns private/secret credentials if configured with a jwk keystore

Downloads are available here.

Features

CXF includes a broad feature set, but it is primarily focused on the following areas:

...