CyberRota Analysis
AI-GeneratedThe vulnerability allows unauthenticated attackers to exploit the SOAP XML parser by sending a SOAP request with excessive nested elements, leading to stack exhaustion and potential process crashes. This unbounded recursion also affects the SOAP value decoder and WSDL node search helper, making it critical for organizations using SoapServer endpoints to prioritize patching. All systems utilizing the affected SOAP services should be assessed for exposure and remediated promptly to prevent denial-of-service attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exists in the SOAP value decoder and in the WSDL node search helper.