Description
An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extension to an allowed one.
Unscored
CVE-2019-6513
EUVD-2019-16072GHSA-p74w-76h9-xxqv
An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by…
Published May 21, 2019 · Updated May 30, 2025 · Assigned by mitre