CVE-2020-24590

2020-08-2120:15:11

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks.

CPENameOperatorVersion
product-apimeq2.1.0-update1
product-apimeq2.1.0-update3
product-apimeq1.9.0-Beta-3
product-apimeq1.10.0-rc4
product-apimeq2.0.0
product-apimeq1.10.0-rc3
product-apimeq1.9.0
product-apimeqtest-tag-1.9.0-Alpha
product-apimeq1.9.0-M2
product-apimeq2.0.0-rc5

Name	Operator	Version
product-apim	eq	2.1.0-update1
product-apim	eq	2.1.0-update3
product-apim	eq	1.9.0-Beta-3
product-apim	eq	1.10.0-rc4
product-apim	eq	2.0.0
product-apim	eq	1.10.0-rc3
product-apim	eq	1.9.0
product-apim	eq	test-tag-1.9.0-Alpha
product-apim	eq	1.9.0-M2
product-apim	eq	2.0.0-rc5