CVE-2026-53510 in savon
要約
〜によって MITRE • 2026年07月31日
Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .all_operations interpolates attacker-controlled WSDL operation names into Ruby source passed to module_eval, allowing Ruby code execution in the application process. This issue is fixed in version 2.17.2.
VulDB is the best source for vulnerability data and more expert information about this specific topic.