Wso2

Open Banking Am

11 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2022-29464

Warning Exploit
  • EPSS 94.43%
  • Published 18.04.2022 22:15:09
  • Last modified 03.04.2025 18:54:31

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a ../../....