Description
The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file.
Remediation
References
http://packetstormsecurity.com/files/146339/SoapUI-5.3.0-Code-Execution.html
Related Vulnerabilities
CVE-2018-1229 Vulnerability in maven package org.springframework.batch:spring-batch-admin
CVE-2021-37695 Vulnerability in npm package ckeditor4
CVE-2020-28442 Vulnerability in npm package js-data
CVE-2014-7808 Vulnerability in maven package org.apache.wicket:wicket-util
CVE-2020-36319 Vulnerability in maven package com.vaadin:flow-server