Description

The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file.

Remediation

References

http://packetstormsecurity.com/files/146339/SoapUI-5.3.0-Code-Execution.html

Related Vulnerabilities

CVE-2022-41340 Vulnerability in npm package @lionello/secp256k1-js

CVE-2021-23438 Vulnerability in npm package mpath

CVE-2021-4245 Vulnerability in npm package rfc6902

CVE-2020-11002 Vulnerability in maven package io.dropwizard:dropwizard-validation

CVE-2018-1324 Vulnerability in maven package org.apache.commons:commons-compress

Severity

High

Classification

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Third Party Advisory VDB Entry CWE-94