CVE-2019-12180

CVE-2019-12180 describes a critical vulnerability in SmartBear ReadyAPI (through 2.8.2 and 3.0.0) and SoapUI (through 5.5) where malicious Groovy scripts embedded in project files are automatically executed upon opening or saving. This allows an attacker to achieve arbitrary code execution on a victim's machine by tricking them into interacting with a specially crafted project file. The vulnerability carries a high CVSS score of 7.8, indicating a significant impact with high confidentiality, integrity, and availability compromise, requiring user interaction but with low attack complexity. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion, suggesting awareness among security researchers.