An XML External Entity (XXE) vulnerability exists in soa-model before 1.6.4 in the WSDLParser function.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:predic8:soa_model:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.6.4"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "19de16902468e7963cc4dc6b544574bc1ea3f251"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "3aa295f155f621d5ea661cb9a0604013fc8fd8ff"
}
],
"source": "REFERENCES_COMMIT"
},
{
"original_tag": "v1.6.4",
"range": [
{
"fixed": "7efbbd6a582ccfdcea3e4f7b60c8b5747728baac"
}
],
"source": "REFERENCES_TAG"
}
]
}