Apache Axis2/Java SSRF via WSDL/XSD schema import resolution
Apache Axis2/Java before 2.0.2 allows SSRF when building service descriptions from WSDL through unrestricted fetching of absolute URLs in wsdl:import and xsd:import/include locations.
1 stories, newest first · one card per story
Apache Axis2/Java before 2.0.2 allows SSRF when building service descriptions from WSDL through unrestricted fetching of absolute URLs in wsdl:import and xsd:import/include locations.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views