Skip to content
OpenAdvisories
Medium WID-SEC-2024-1782 1 CVE

SmartBear SoapUI: Schwachstelle ermöglicht Codeausführung

Published Aug 6, 2024 · Updated Aug 6, 2024 · de-DE

Vendor: SMARTBEAR Product: SoapUI

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in SmartBear SoapUI ausnutzen, um beliebigen Programmcode auszuführen.

Product

SoapUI ist eine Web-Service-Testanwendung für serviceorientierte Architekturen (SOA) und Representational State Transfers (REST).

Vulnerabilities 1

  • High 7.8
    CVE-2024-7565

    SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability

    SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of SMARTBEAR SoapUI. User interaction is required to exploit this vulnerabili…

    SMARTBEAR SoapUI

Revision history

  1. #1

    Initiale Fassung

References