Description
The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file.
Remediation
References
http://packetstormsecurity.com/files/146339/SoapUI-5.3.0-Code-Execution.html
Related Vulnerabilities
CVE-2019-15903 Vulnerability in npm package dbus
CVE-2011-2894 Vulnerability in maven package org.springframework:spring-core
CVE-2022-42889 Vulnerability in maven package org.apache.commons:commons-text
CVE-2021-20220 Vulnerability in maven package io.undertow:undertow-core
CVE-2013-1966 Vulnerability in maven package com.opensymphony:xwork-core