Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SmartBear SoapUI 安全漏洞
Vulnerability Description
SmartBear SoapUI是美国SmartBear软件公司的一套基于Java的用于对Web服务进行测试的开源工具。该工具允许开发人员直观的测试基于SOAP的Web服务,包括功能测试、性能测试、回归测试等。 SmartBear SoapUI 4.6.4之前版本中的WSDL/WADL导入功能中存在安全漏洞。远程攻击者可借助WSDL文件中特制的请求参数利用该漏洞执行任意Java代码。
CVSS Information
N/A
Vulnerability Type
N/A