Unrated
An issue was discovered in WSO2 API Manager 2.6.0. It is possible to force the application to perform requests to the internal workstation (SSRF port-...
CVE-2019-6512
First seen on SecPulse
Original description The description as published by the source.
An issue was discovered in WSO2 API Manager 2.6.0. It is possible to force the application to perform requests to the internal workstation (SSRF port-scanning), other adjacent workstations (SSRF network scanning), or to enumerate files because of the existence of the file:// wrapper.
References
- advisory wso2.com
- advisory excellium-services.com
- web cds.thalesgroup.com