Product

Identity Server (<= 5.11.0)

1 brief RSS

WSO2: Unauthenticated Remote Code Execution via FileUploadServlet (CVE-2022-29464)

CVE-2022-29464 is an unauthenticated arbitrary file upload vulnerability in the WSO2 FileUploadServlet that enables remote code execution via directory traversal and malicious JSP deployment.

API Manager +3 web-application-vulnerability remote-code-execution arbitrary-file-upload cve-2022-29464

1r 2t 1c 1h ago