Research shows a .NET proxy design flaw enables file writes and RCE through attacker-supplied WSDL in multiple products.
In the Barracuda Networks Inc. case, a single unauthenticated SOAP request was sufficient to force the application to import ...
Researcher warns that many .NET applications might be vulnerable to arbitrary file writes because .NET’s HTTP client proxy ...