1 matches found
GHSA-MX5J-MP4F-G8JG Savon::Model evaluates WSDL operation names as Ruby source
Impact Savon::Model generated SOAP operation methods by interpolating operation names into Ruby source passed to moduleeval. An attacker who can control the operation names of a WSDL, can inject Ruby code that executes in the application process. This affects only the .alloperations class method...
8.1CVSS5.6AI score0.00396EPSS
SaveExploits0References6
20