CVE-2026-120832

Apache Axis2/Java versions through 2.0.1 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The issue occurs when the application builds a service description from a WSDL using ServiceClient , AxisService.createClientSideAxisService , or WSDLToAxisServiceBuilder . Because the s...

EUVD-2026-119929

Server-Side Request Forgery SSRF vulnerability in Apache Axis2/Java. When Axis2 built a service description from a WSDL, through ServiceClient, AxisService.createClientSideAxisService or WSDLToAxisServiceBuilder, it fetched the absolute URLs in wsdl:import locations and in xsd:import and...

CVE-2023-25560 JSON Injection in DataHub

DataHub is an open-source metadata platform. The AuthServiceClient which is responsible for creation of new accounts, verifying credentials, resetting them or requesting access tokens, crafts multiple JSON strings using format strings with user-controlled data. This means that an attacker may be...