coldbraid

CVE-2022-29464 WSO2 Multiple Products

Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.

CVSS
not scored

CWE-22

On CISA’s exploited list

WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

Added
2022-04-25
Federal patch deadline
2022-05-16
Ransomware use
known