Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-c2fp-mpmm-cqxv

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-c2fp-mpmm-cqxv

Code injection via property expansion in SoapUI The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.

gitlab/maven/com.smartbear.soapui/soapui/CVE-2014-1202

Improper Control of Generation of Code ('Code Injection') The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.