An issue was discovered in WSO2 API Manager 2.6.0. Uploaded documents for API documentation are available to an unauthenticated user.

Published May 14, 2019 · Updated May 30, 2025 · Assigned by mitre