Описание
An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extension to an allowed one.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:wso2:api_manager:2.6.0:*:*:*:*:*:*:*
EPSS
Процентиль: 54%
0.00309
Низкий
5.4 Medium
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-434
Связанные уязвимости
CVSS3: 5.4
github
больше 3 лет назад
An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extension to an allowed one.
EPSS
Процентиль: 54%
0.00309
Низкий
5.4 Medium
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-434