Description
An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature of the event simulator component.
Low · 3.5
CVE-2019-15108
EUVD-2019-6179GHSA-w2xf-p9v3-9fg8
An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-uplo…
Published Aug 16, 2019 · Updated Aug 5, 2024 · Assigned by mitre