CVE-2018-20580: Input Validation

Published May 3, 2019

Updated

The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.

Affected Software

2 affected components

SMARTBEAR ReadyAPI=2.5.0

SMARTBEAR ReadyAPI=2.6.0

Event History

May 3, 2019

CVE Published

via MITRE·07:57 PM

Data Sourced

via MITRE·07:57 PM

Description

Frequently Asked Questions

What is CVE-2018-20580?

CVE-2018-20580 is a vulnerability in SmartBear ReadyAPI 2.5.0 and 2.6.0 that allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.

What is the severity of CVE-2018-20580?

CVE-2018-20580 has a severity level of critical with a severity value of 8.8.

How does CVE-2018-20580 affect SmartBear ReadyAPI?

CVE-2018-20580 affects SmartBear ReadyAPI versions 2.5.0 and 2.6.0.

How can the vulnerability in SmartBear ReadyAPI be exploited?

The vulnerability in SmartBear ReadyAPI can be exploited by remote attackers who send a crafted request parameter in a WSDL file to execute arbitrary Java code.

Are there any known fixes or patches for CVE-2018-20580?

There are no known fixes or patches available for CVE-2018-20580 at the moment. It is recommended to update to a newer version of SmartBear ReadyAPI when a fix becomes available.