CVE-2022-40705
1 advisory.
Maven/soap:soap CVE-2022-40705: high 7.5
Apache SOAP's RPCRouterServlet allows reading of arbitrary files over HTTP
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2 | - | 2.3.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-jq8c-j47c-vvwm
- https://nvd.nist.gov/vuln/detail/CVE-2022-40705
- https://lists.apache.org/thread/02yo04w93rdjmllz4454lvodn5xzhwhl
- http://www.openwall.com/lists/oss-security/2022/09/22/1
CVE-2022-40705 · published · modified · JSON