Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SmartBear SoapUI 代码注入漏洞
Vulnerability Description
SmartBear SoapUI是美国SmartBear软件公司的一套基于Java的用于对Web服务进行测试的开源工具。该工具允许开发人员直观的测试基于SOAP的Web服务，包括功能测试、性能测试、回归测试等。 SmartBear SoapUI 5.3.0版本中的项目导入功能存在代码注入漏洞。远程攻击者可借助WSDL项目文件中特制的请求参数利用该漏洞执行任意的Java代码。
CVSS Information
N/A
Vulnerability Type
N/A