Non évaluée

An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature...

CVE-2019-15108 Première détection SecPulse Aug 16, 2019

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature of the event simulator component.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

patch docs.wso2.com

Faits clés

Gravité: Non évaluée
Publication: Aug 16, 2019
Première détection SecPulse: Aug 16, 2019

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52