Kasun Chathuranga Profile picture
⚔️ CyberSec Engineer 🛡️ | 🎮 AR Game Player 👞 | 🚀🛰️ Rocketry & Space Enthusiast 🔭🌌 | My Tweets are my personal views. | Retweets/Links ≠ Endorsements.
Apr 21, 2022 8 tweets 3 min read
A Critical Unauth RCE through arbitrary file upload was found in management console of following WSO2 products by @orange_8361
🔴 API Manager
🔴 Identity Server
🔴 Enterprise Integrator The vulnerability has CVSSv3 9.8 score assigned with CVE-2022-29464 & WSO2 Security Advisory WSO2-2021-1738