← All credits

Apache would like to thank TsungShu Chiu (CHT Security) for reporting this issue

2 vulnerability records and advisories credit this contributor.

CVE-2022-45378
Apache SOAP allows unauthenticated users to potentially invoke arbitrary code
CVE-2022-40705
Apache SOAP: XML External Entity Injection (XXE) allows unauthenticated users to read arbitrary files via HTTP