WSO2 Open Banking AM any version

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a ../../../../repository/deployment/server/webapps directory. This affects WSO2 API Manager 2.2.0 up to 4.0.0, WSO2 Identity Server 5.2.0 up to 5.11.0, WSO2 Identity Server Analytics 5.4.0, 5.4.1, 5.5.0 and 5.6.0, WSO2 Identity Server as Key Manager 5.3.0 up to 5.11.0, WSO2 Enterprise Integrator 6.2.0 up to 6.6.0, WSO2 Open Banking AM 1.4.0 up to 2.0.0 and WSO2 Open Banking KM 1.4.0, up to 2.0.0.

Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products

XML External Entity Injection in Multiple WSO2 Products Allows Arbitrary file read and Denial of Service

Arbitrary Code Execution via Administrative Operations in Multiple WSO2 Products Allows Remote Code Execution

Reflected Cross-Site Scripting via URL Parameter in Multiple WSO2 Products Enables UI Modification

Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions

Role Overwriting via Silent JIT Provisioning in Multiple WSO2 Products Enables Privilege Escalation

Authorization Code issued for Deleted User reuse in Multiple WSO2 Products Allows Unauthorized Access

Sensitive Information Disclosure via Event Publisher Logging in Multiple WSO2 Products

Username Enumeration via Login Interface in Multiple WSO2 Products Allows User Account Discovery