CVE-2022-29464
KEV · RansomwareWSO2 Multiple Products Unrestrictive Upload of File Vulnerability
View CVE record →- Vendor / Project
- WSO2
- Product
- Multiple Products
- Date added
- Apr 25, 2022
- Due date
- May 16, 2022
- Known ransomware use
- Known
- CWEs
- CWE-22
Description
Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.
Required action
Apply updates per vendor instructions.