Skip to content
Threat Feed
Subscribe

Product

WSO2

1 brief RSS
high advisory

WSO2 Products Vulnerable to XML External Entity (XXE) Injection via CVE-2024-2374

CVE-2024-2374 describes an XML External Entity (XXE) vulnerability in multiple WSO2 products, where improperly configured XML parsers allow attackers to inject malicious XML payloads to include external resources, leading to confidential file access, limited HTTP resource access, and denial-of-service attacks.

WSO2 xxe cve-2024-2374 xml vulnerability attack cloud network
2r 2t