Lucene search
K

EUVD-2025-37942

🗓️ 05 Nov 2025 18:03:49Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 1 Views

WSO2 file upload flaw enables admins to place crafted files in user paths, risking remote code execution.

Related
Affected
Refs
[
  {
    "enisaIdVendor": [
      {
        "id": "ad454da2-e122-33e0-b9de-4115fcf9742b",
        "vendor": {
          "name": "WSO2"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "00b3031b-6126-307d-8b2c-4909a1750b9b",
        "product": {
          "name": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.library"
        },
        "product_version": "4.7.99 <4.7.99.304"
      },
      {
        "id": "01abd6f0-e3a3-3988-818d-2402b9b93b44",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.6.0 <4.6.0.2005"
      },
      {
        "id": "031fb7ef-9247-3a24-93d8-98ebf85eff89",
        "product": {
          "name": "org.wso2.carbon.event-processing:org.wso2.carbon.event.simulator.core"
        },
        "product_version": ""
      },
      {
        "id": "08908765-5a14-3cd7-a2e4-e99dc225981a",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.6.2 <4.6.2.668"
      },
      {
        "id": "08f98315-d7d6-3bcf-a99d-51a322a2a160",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.module.mgt"
        },
        "product_version": "4.9.15 <4.9.15.2"
      },
      {
        "id": "0cd5dc49-3a9b-3096-aeb9-cdec5f4bff97",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.9.0 <4.9.0.103"
      },
      {
        "id": "115eb5d8-5201-3ce8-940c-254769a51cda",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.webapp.mgt"
        },
        "product_version": "4.10.1 <4.10.1.1"
      },
      {
        "id": "12229d8e-fa12-3bbb-b669-c10c00bcdbd9",
        "product": {
          "name": "WSO2 Open Banking AM"
        },
        "product_version": "2.0.0 <2.0.0.394"
      },
      {
        "id": "1638fe28-a212-3741-af52-e1791d54bf34",
        "product": {
          "name": "WSO2 Micro Integrator"
        },
        "product_version": "4.1.0 <4.1.0.147"
      },
      {
        "id": "1bce9ecb-1584-3fda-a75f-ceffee799ae2",
        "product": {
          "name": "WSO2 Open Banking IAM"
        },
        "product_version": "2.0.0 <2.0.0.414"
      },
      {
        "id": "1deda123-a8c5-3aa0-85c4-b0ab916c5f6c",
        "product": {
          "name": "WSO2 Universal Gateway"
        },
        "product_version": "4.5.0 <4.5.0.27"
      },
      {
        "id": "28f13d97-9de7-331d-b2e6-2359c0600178",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "4.4.0 <4.4.0.45"
      },
      {
        "id": "29bfc3f4-7cf1-31be-b984-e153040d1e23",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.module.mgt"
        },
        "product_version": "4.10.1 <4.10.1.1"
      },
      {
        "id": "2df483c3-e8b3-36ab-b954-bf35112a01e0",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": ""
      },
      {
        "id": "2f312aca-f032-365d-829a-216a48ae064f",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": "5.10.0 <5.10.0.375"
      },
      {
        "id": "34130667-143c-3881-8024-b8f05bb04fad",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.module.mgt"
        },
        "product_version": "4.11.18 <4.11.18.1"
      },
      {
        "id": "37754108-65ca-3311-8f8a-a9a3f62276a4",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.9.28 <4.9.28.12"
      },
      {
        "id": "3b16ee63-2168-3d21-b669-8301ee92a278",
        "product": {
          "name": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.library"
        },
        "product_version": "4.7.204 <4.7.204.13"
      },
      {
        "id": "3c4d81bb-fef2-38bc-a87a-0719bb486d62",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.module.mgt"
        },
        "product_version": "4.11.14 <4.11.14.2"
      },
      {
        "id": "3c7dbf2e-1766-36d6-a451-738fe762315c",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.5.3 <4.5.3.46"
      },
      {
        "id": "3cc8af08-222c-3b97-bab4-cf3a3dc26450",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.6.0 <4.6.0.2005"
      },
      {
        "id": "42d2a34b-73e0-3858-a3c8-64809b236bf3",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": ""
      },
      {
        "id": "4415b6fe-5ac1-3edf-93e8-edc8260f2b44",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.6.1 <4.6.1.153"
      },
      {
        "id": "485acf30-ed51-368c-aa95-eaafb990803f",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "3.2.0 <3.2.0.448"
      },
      {
        "id": "4910fd6e-f2ac-310b-b697-1efff1338323",
        "product": {
          "name": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.library"
        },
        "product_version": "4.7.175 <4.7.175.30"
      },
      {
        "id": "4b077942-6c03-3243-8337-f6094506cb50",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "3.2.1 <3.2.1.66"
      },
      {
        "id": "4ccd1d8f-30d6-3eb7-a753-12af2b2f4a6f",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.9.28 <4.9.28.12"
      },
      {
        "id": "515a5c6b-6088-3d64-9d31-fa04e009d795",
        "product": {
          "name": "org.apache.ws.commons.axiom.wso2:axiom"
        },
        "product_version": ""
      },
      {
        "id": "516de72d-3dcd-35e0-9480-fd07b972794c",
        "product": {
          "name": "WSO2 Identity Server as Key Manager"
        },
        "product_version": "5.10.0 <5.10.0.365"
      },
      {
        "id": "5818f358-73fb-3b2c-ac6a-024dc961162b",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.6.3 <4.6.3.37"
      },
      {
        "id": "5952be9e-6601-31f2-98ac-f03dfc3f2baa",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.6.3 <4.6.3.37"
      },
      {
        "id": "5b77d93f-1637-3849-8bfc-d13a1e6adaf7",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.webapp.mgt"
        },
        "product_version": "4.11.17 <4.11.17.3"
      },
      {
        "id": "63a6f83b-0bed-3373-ac67-38ad3f09e247",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.webapp.mgt"
        },
        "product_version": "4.11.1 <4.11.1.3"
      },
      {
        "id": "645c2020-90d9-3593-a559-5a73a25866bc",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.9.26 <4.9.26.26"
      },
      {
        "id": "650c8ba3-cc43-327a-abc1-f93cec68d55c",
        "product": {
          "name": "WSO2 Open Banking AM"
        },
        "product_version": ""
      },
      {
        "id": "6648c419-c646-3225-9527-02bc33f2049f",
        "product": {
          "name": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.library"
        },
        "product_version": "4.7.188 <4.7.188.12"
      },
      {
        "id": "6a0266ed-39d2-3a07-9b59-eb7f72fca817",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "4.2.0 <4.2.0.169"
      },
      {
        "id": "6af96e83-9643-3b03-bb4d-a58f1b88923e",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": "7.1.0 <7.1.0.31"
      },
      {
        "id": "6f776c26-faa1-3167-a673-5ea2efe37756",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.6.4 <4.6.4.15"
      },
      {
        "id": "74f2a945-50c3-3161-afea-74790f586bec",
        "product": {
          "name": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.library"
        },
        "product_version": "4.7.61 <4.7.61.62"
      },
      {
        "id": "77f71ade-f4a8-3407-ab50-0faf90c491ef",
        "product": {
          "name": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.library"
        },
        "product_version": "4.7.221 <4.7.221.7"
      },
      {
        "id": "781a6f79-ae2a-36fd-b49f-e79950edbc42",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.webapp.mgt"
        },
        "product_version": ""
      },
      {
        "id": "7b3f0cfa-71c6-3023-8130-94a7d9aba483",
        "product": {
          "name": "org.apache.ws.commons.axiom.wso2:axiom"
        },
        "product_version": "1.2.11 <1.2.11.wso2v17_5"
      },
      {
        "id": "7b9dae3b-0962-3f9d-a796-0c31fbe5a7a0",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": ""
      },
      {
        "id": "7ca7eda2-92f2-3a9b-a4bd-6564a2b32618",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "4.0.0 <4.0.0.367"
      },
      {
        "id": "81731a02-e398-32a4-988f-574cb5f8bf06",
        "product": {
          "name": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.library"
        },
        "product_version": "4.7.245 <4.7.245.7"
      },
      {
        "id": "819070ce-9a82-30f2-9a64-b4a50fa8243f",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.6.4 <4.6.4.15"
      },
      {
        "id": "81f94c44-a275-35bf-9f22-6252b730ccd0",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.webapp.mgt"
        },
        "product_version": "4.11.7 <4.11.7.5"
      },
      {
        "id": "86f6423c-6253-39ed-b3e0-7c77f3cdb77b",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.module.mgt"
        },
        "product_version": "4.11.7 <4.11.7.5"
      },
      {
        "id": "8714c53f-0ad1-36fe-9fbf-0c75d58eb674",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": "7.0.0 <7.0.0.124"
      },
      {
        "id": "8da1d1c2-5537-37bd-943e-7f0341b4b6bd",
        "product": {
          "name": "org.jaggeryjs:org.jaggeryjs.jaggery.app.mgt"
        },
        "product_version": "0.14.13 <0.14.13.8"
      },
      {
        "id": "8e876a49-acd3-37a2-98cb-0eeb6158771e",
        "product": {
          "name": "org.wso2.carbon.event-processing:org.wso2.carbon.event.simulator.core"
        },
        "product_version": "2.3.1 <2.3.1.3"
      },
      {
        "id": "8e9da9d8-daff-3a0f-bb39-0344ddc81152",
        "product": {
          "name": "org.wso2.carbon.event-processing:org.wso2.carbon.event.simulator.core"
        },
        "product_version": "2.2.14 <2.2.14.7"
      },
      {
        "id": "91055759-eab4-3fbb-b68d-e833fb7841e4",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.7.1 <4.7.1.72"
      },
      {
        "id": "94fb031d-a412-3ddb-b99b-8b460a95752f",
        "product": {
          "name": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.library"
        },
        "product_version": ""
      },
      {
        "id": "95861dc0-0872-3339-9035-f567d35a7668",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.10.42 <4.10.42.14"
      },
      {
        "id": "9620bb3b-f895-3cf5-8b47-edca73220c6a",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": "6.0.0 <6.0.0.248"
      },
      {
        "id": "99b6c6e5-3357-382f-8dd2-0c65bec1434a",
        "product": {
          "name": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.library"
        },
        "product_version": "4.7.131 <4.7.131.22"
      },
      {
        "id": "9aa166e2-9c44-3f72-b332-169997c459b2",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.module.mgt"
        },
        "product_version": "4.11.17 <4.11.17.3"
      },
      {
        "id": "9d3900f5-a82e-37f0-b883-c9bfa869d521",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.8.1 <4.8.1.40"
      },
      {
        "id": "9eed66e2-0543-3e94-bcf4-c4cf5fd8519a",
        "product": {
          "name": "WSO2 Micro Integrator"
        },
        "product_version": "4.2.0 <4.2.0.141"
      },
      {
        "id": "9f48bdb6-beb6-3b9c-80d4-ffb7ff68caf4",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.10.42 <4.10.42.14"
      },
      {
        "id": "a04037b5-1d86-375f-9112-6a0df664a142",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.6.1 <4.6.1.153"
      },
      {
        "id": "a0f79cc2-0910-3ffe-8976-b9ca0b16dfa9",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.webapp.mgt"
        },
        "product_version": "4.11.18 <4.11.18.1"
      },
      {
        "id": "a538f803-9796-34e5-9bae-dfb960bf388a",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.8.1 <4.8.1.40"
      },
      {
        "id": "a893cd91-afd1-3cb5-a6b3-0a5ebe4ea01e",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "3.1.0 <3.1.0.345"
      },
      {
        "id": "ab8f7fbf-6ac3-3044-a65a-f6a17b31f7e4",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.9.27 <4.9.27.11"
      },
      {
        "id": "ae0bd7ad-f7b4-336e-9b2e-d293a3dbb113",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.webapp.mgt"
        },
        "product_version": "4.10.9 <4.10.9.2"
      },
      {
        "id": "af6d3ae8-9349-3721-8ff2-e9f43e0fd6b5",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.7.1 <4.7.1.72"
      },
      {
        "id": "b154cd10-779b-38d0-927e-72d65b145b7e",
        "product": {
          "name": "org.wso2.carbon.event-processing:org.wso2.carbon.event.simulator.core"
        },
        "product_version": "2.2.17 <2.2.17.2"
      },
      {
        "id": "b1631a4e-cc5c-390e-8ecc-8bfa3fef70b5",
        "product": {
          "name": "org.jaggeryjs:org.jaggeryjs.jaggery.app.mgt"
        },
        "product_version": "0.14.16 <0.14.16.1"
      },
      {
        "id": "bb41e5b2-8ae0-31e4-b331-9c7a71f21842",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.5.3 <4.5.3.46"
      },
      {
        "id": "bf354b66-7d27-33f5-b10d-c83aa6fe25a3",
        "product": {
          "name": "WSO2 Enterprise Integrator"
        },
        "product_version": "6.6.0 <6.6.0.224"
      },
      {
        "id": "bf437d5f-2b4b-386b-a7a8-059cd27d6f60",
        "product": {
          "name": "WSO2 Open Banking IAM"
        },
        "product_version": ""
      },
      {
        "id": "c2df3b85-67b7-35e3-a3a7-3aef89b79c91",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.module.mgt"
        },
        "product_version": "4.11.1 <4.11.1.3"
      },
      {
        "id": "c54a4bf0-6559-32a1-b444-3106d4b6a218",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "4.5.0 <4.5.0.28"
      },
      {
        "id": "c54ace1a-1171-30ea-800f-e1383d4ffe65",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.webapp.mgt"
        },
        "product_version": "4.11.3 <4.11.3.3"
      },
      {
        "id": "c7b89975-0c65-356c-aa8a-4c0c90bf9ed5",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.module.mgt"
        },
        "product_version": "4.11.3 <4.11.3.3"
      },
      {
        "id": "d21d4f41-0a7e-3612-9572-df815f03c4bb",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "4.1.0 <4.1.0.230"
      },
      {
        "id": "d34a84ba-939b-31c9-ac3b-15f431e27d27",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": "5.11.0 <5.11.0.419"
      },
      {
        "id": "d63bf63b-ad25-3635-b7f1-205d930c9fee",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": ""
      },
      {
        "id": "d6d0e6ab-300c-3975-a76e-80ceddc4010b",
        "product": {
          "name": "WSO2 Micro Integrator"
        },
        "product_version": "4.0.0 <4.0.0.145"
      },
      {
        "id": "d77222b3-67a2-3972-9d2f-f346d7aa9c58",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.9.0 <4.9.0.103"
      },
      {
        "id": "d7764d13-c608-3d72-9c4f-85431bc4a27a",
        "product": {
          "name": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.library"
        },
        "product_version": "4.7.30 <4.7.30.47"
      },
      {
        "id": "da59ba53-af56-3079-9b9c-237faeab903b",
        "product": {
          "name": "WSO2 Micro Integrator"
        },
        "product_version": ""
      },
      {
        "id": "dc4c43fd-862c-3d5f-98a0-c1c567c45d0b",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.10.9 <4.10.9.71"
      },
      {
        "id": "dfe752f2-2879-312e-bc88-f21f986c4690",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.10.9 <4.10.9.71"
      },
      {
        "id": "e2fff4bf-5f90-3456-8d20-52136d0d878e",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.9.26 <4.9.26.26"
      },
      {
        "id": "e5d7d7a6-00d4-32d1-b9b8-0f7ac6c1bac6",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.utils"
        },
        "product_version": "4.6.2 <4.6.2.668"
      },
      {
        "id": "e88a4e50-ba09-3ace-bf74-5af256705dbf",
        "product": {
          "name": "WSO2 Traffic Manager"
        },
        "product_version": "4.5.0 <4.5.0.27"
      },
      {
        "id": "e89795f3-90c2-338a-bb6e-e4024e56ac0d",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.module.mgt"
        },
        "product_version": ""
      },
      {
        "id": "ebc34475-f4df-3c7e-af91-455020e935d2",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.webapp.mgt"
        },
        "product_version": "4.11.14 <4.11.14.2"
      },
      {
        "id": "ee7d9dde-5d51-34fd-8def-ab96a2c9be9e",
        "product": {
          "name": "WSO2 Identity Server as Key Manager"
        },
        "product_version": ""
      },
      {
        "id": "ef6fe2da-ab59-3b28-9b55-b4fcc8ee7b27",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": "6.1.0 <6.1.0.248"
      },
      {
        "id": "f08b252a-e43f-3b03-a0e6-8cd48250e5fc",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "4.3.0 <4.3.0.81"
      },
      {
        "id": "f317f701-9d11-35fe-a63f-8b64990d546f",
        "product": {
          "name": "org.wso2.carbon:org.wso2.carbon.base"
        },
        "product_version": "4.9.27 <4.9.27.11"
      },
      {
        "id": "f56a175a-975e-397a-8fcd-5953f4e87a00",
        "product": {
          "name": "WSO2 Enterprise Integrator"
        },
        "product_version": ""
      },
      {
        "id": "faf18add-2c70-3854-9639-ce3a0f694f0e",
        "product": {
          "name": "WSO2 API Control Plane"
        },
        "product_version": "4.5.0 <4.5.0.29"
      },
      {
        "id": "ff923c8b-f3c9-3e94-be98-913969adb187",
        "product": {
          "name": "org.wso2.carbon.deployment:org.wso2.carbon.module.mgt"
        },
        "product_version": "4.10.9 <4.10.9.2"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

05 Nov 2025 18:49Current
7.7High risk
Vulners AI Score7.7
CVSS 3.18.4
EPSS0.00709
SSVC
1