Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:wso2:api_manager:*:*:*:*:*:*:*:*

2 briefs RSS
critical advisory

WSO2: Unauthenticated Remote Code Execution via FileUploadServlet (CVE-2022-29464)

CVE-2022-29464 is an unauthenticated arbitrary file upload vulnerability in the WSO2 FileUploadServlet that enables remote code execution via directory traversal and malicious JSP deployment.

API Manager +4 web-application-vulnerability remote-code-execution arbitrary-file-upload cve-2022-29464
1r 2t 2c updated
critical advisory

CVE-2026-5430: Path Traversal and RCE in WSO2 Products

Multiple WSO2 products are vulnerable to a path traversal flaw that allows unauthenticated attackers to perform unrestricted file uploads, resulting in potential remote code execution.

PoC API Control Plane +3 cve path-traversal rce wso2
2t 1c updated