https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:25:58 +0000 https://cve.radiocsirt.org/vuln/cve-2024-7074 <p><strong>Affected:</strong> WSO2 Enterprise Integrator, WSO2 API Manager, WSO2 Enterprise Service Bus, WSO2 Enterprise Mobility Manager, WSO2 Micro Integrator, WSO2 Open Banking AM, WSO2 Carbon Synapse Artifact Uploader BE</p> <p>An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user input in SOAP admin services. A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location on the server.</p> <p>By leveraging this vulnerability, an attacker could upload a specially crafted payload, potentially achieving remote code execution (RCE) on the server. Exploitation requires valid admin credentials, limiting its impact to authorized but potentially malicious users.</p> <p><strong>Affected:</strong> WSO2 Enterprise Integrator, WSO2 API Manager, WSO2 Enterprise Service Bus, WSO2 Enterprise Mobility Manager, WSO2 Micro Integrator, WSO2 Open Banking AM, WSO2 Carbon Synapse Artifact Uploader BE</p> <p>An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user input in SOAP admin services. A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location on the server.</p> <p>By leveraging this vulnerability, an attacker could upload a specially crafted payload, potentially achieving remote code execution (RCE) on the server. Exploitation requires valid admin credentials, limiting its impact to authorized but potentially malicious users.</p> https://cve.radiocsirt.org/vuln/cve-2024-7074