VDB
BDU%3A2022-02512
BDU%3A2022-02512
PUBLISHED
CVSS 10 CRITICAL
Уязвимость платформы для интеграции интерфейсов прикладного программирования, приложений и веб-служб WSO2, связанная с возможностью загрузки произвольного JSP-файла на сервер, позволяющая нарушителю
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| WSO2 | WSO2 API Manager, WSO2 Identity Server, WSO2 Identity Server Analytics, WSO2 Identity Server as Key Manager, WSO2 Enterprise Integrator |
Timeline
- Apr 22, 2022 CVE Published
- Sep 24, 2024 CVE Updated
References
- https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1738 url
- https://github.com/wso2/carbon-kernel/pull/3152 url
- https://github.com/wso2/carbon-identity-framework/pull/3864 url
- https://github.com/wso2-extensions/identity-carbon-auth-rest/pull/167 url
- https://vuldb.com/ru/?id.197671 url
- http://packetstormsecurity.com/files/166921/WSO-Arbitrary-File-Upload-Remote-Code-Execution.html url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url