Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/31 7:38 p.m.9 views

GHSA-MX5J-MP4F-G8JG Savon::Model evaluates WSDL operation names as Ruby source

Impact Savon::Model generated SOAP operation methods by interpolating operation names into Ruby source passed to moduleeval. An attacker who can control the operation names of a WSDL, can inject Ruby code that executes in the application process. This affects only the .alloperations class method...

8.1CVSS5.6AI score0.00396EPSS
SaveExploits0References6
Rows per page
Query Builder