CVE-2025-48795 — Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which means that the entire temporary file is read into memory and then logged. An attack — CVE Database · The Intelligence Room