Design/Logic Flaw

2019-05-2122:29:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.8%

JSON

An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extension to an allowed one.

CPENameOperatorVersion
api_managereq2.6.0

CPE	Name	Operator	Version
	api_manager	eq	2.6.0

References

www.excellium-services.com/cert-xlm-advisory

www.excellium-services.com/cert-xlm-advisory/cve-2019-6513/