CVE-2020-13226

WSO2 API Manager 3.0.0 does not properly restrict outbound network access from a Publisher node, opening up the possibility of SSRF to this node's entire intranet...

CVE-2020-13226

CVE-2020-13226: WSO2 API Manager 3.0.0 contains a SSRF vulnerability where outbound network access from a Publisher node is not properly restricted, allowing access to the intranet. The NVD entry notes a high base score (CVSSv3.1: 9.8, CRITICAL) with network access, low attack complexity, and no ...