Description
WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | WSO2 / WSO2 Carbon API Manager Rest API Utility | >= 9.20.74, < 9.20.74.401 | affected |
| org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | WSO2 / WSO2 Carbon API Manager Rest API Utility | >= 9.28.116, < 9.28.116.417 | affected |
| org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | WSO2 / WSO2 Carbon API Manager Rest API Utility | >= 9.29.120, < 9.29.120.236 | affected |
| org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | WSO2 / WSO2 Carbon API Manager Rest API Utility | >= 9.30.67, < 9.30.67.167 | affected |
| org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | WSO2 / WSO2 Carbon API Manager Rest API Utility | >= 9.31.86, < 9.31.86.158 | affected |
| org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | WSO2 / WSO2 Carbon API Manager Rest API Utility | >= 9.32.147, < 9.32.147.59 | affected |
| org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | WSO2 / WSO2 Carbon API Manager Rest API Utility | >= 9.33.106, <= * | unaffected |
| WSO2 API Control Plane | WSO2 / WSO2 API Control Plane | >= 4.5.0, < 4.5.0.58 | affected |
| WSO2 API Control Plane | WSO2 / WSO2 API Control Plane | >= 4.6.0, < 4.6.0.22 | affected |
| WSO2 API Manager | WSO2 / WSO2 API Manager | >= 0, < 4.1.0 | unknown |
| WSO2 API Manager | WSO2 / WSO2 API Manager | >= 4.1.0, < 4.1.0.257 | affected |
| WSO2 API Manager | WSO2 / WSO2 API Manager | >= 4.2.0, < 4.2.0.197 | affected |
| WSO2 API Manager | WSO2 / WSO2 API Manager | >= 4.3.0, < 4.3.0.108 | affected |
| WSO2 API Manager | WSO2 / WSO2 API Manager | >= 4.4.0, < 4.4.0.72 | affected |
| WSO2 API Manager | WSO2 / WSO2 API Manager | >= 4.5.0, < 4.5.0.57 | affected |
| WSO2 API Manager | WSO2 / WSO2 API Manager | >= 4.6.0, < 4.6.0.21 | affected |
| WSO2 Traffic Manager | WSO2 / WSO2 Traffic Manager | >= 4.5.0, < 4.5.0.56 | affected |
| WSO2 Traffic Manager | WSO2 / WSO2 Traffic Manager | >= 4.6.0, < 4.6.0.21 | affected |
| WSO2 Universal Gateway | WSO2 / WSO2 Universal Gateway | >= 4.5.0, < 4.5.0.57 | affected |
| WSO2 Universal Gateway | WSO2 / WSO2 Universal Gateway | >= 4.6.0, < 4.6.0.21 | affected |