CVE-2020-13576: Fedoraproject Fedora

Critical severity, CVSS 9.8. EPSS: 5.9% chance of exploitation in the next 30 days.

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.

Affected products

• Fedoraproject Fedora: version 33 only; version 34 only
• Genivia Gsoap: version 2.8.107 only

Published 2021-02-10. Last modified 2026-06-17.