← Back

Soappy

soappy

Vendor: Makina Corpus • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-3243
1Makina Corpus
1Soappy
May 6, 2026
May 12, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted SOAP request containing a large number of ne...Show more
SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted SOAP request containing a large number of nested entity references.Show less
CVE-2014-3242
1Makina Corpus
1Soappy
May 6, 2026
May 12, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.