Description
A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location within the deployment via a system REST API. Successful uploads may lead to remote code execution.
By leveraging the vulnerability, a malicious actor may perform Remote Code Execution by uploading a specially crafted payload.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WSO2 | WSO2 API Manager | 4.2.0 – < 4.2.0.179, 4.3.0 – < 4.3.0.91, 4.4.0 – < 4.4.0.55, 4.5.0 – < 4.5.0.38, 4.6.0 – < 4.6.0.3 | 4.2.0.179 |
| WSO2 | WSO2 API Control Plane | 4.5.0 – < 4.5.0.39, 4.6.0 – < 4.6.0.3 | 4.5.0.39 |
| WSO2 | WSO2 Universal Gateway | 4.5.0 – < 4.5.0.37, 4.6.0 – < 4.6.0.3 | 4.5.0.37 |
| WSO2 | WSO2 Traffic Manager | 4.5.0 – < 4.5.0.37, 4.6.0 – < 4.6.0.3 | 4.5.0.37 |
| WSO2 | org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.impl | 9.28.116 – < 9.28.116.391, 9.29.120 – < 9.29.120.210, 9.30.67 – < 9.30.67.133, 9.31.86 – < 9.31.86.100, 9.32.147 – < 9.32.147.2 | 9.28.116.391 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.admin.v1 | < 9.32.167 | 9.32.167 | GHSA-p6jf-79j3-33f3 |