Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the deployment. Successful exploitation may lead to remote code execution (RCE) on the server, depending on how the uploaded file is processed. By default, this vulnerability is only exploitable by users with administrative access to the affected SOAP services.

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

危险类型文件的不加限制上传

WSO2多款产品 安全漏洞

WSO2 API Manager等都是美国WSO2公司的产品。WSO2 API Manager是一套API生命周期管理解决方案。WSO2 Identity Server（IS）是一款身份认证服务器。WSO2 Enterprise Integrator是一套开源的混合集成平台。 WSO2多款产品存在安全漏洞，该漏洞源于SOAP管理服务对上传内容和目标验证不足，可能导致远程代码执行。以下产品受到影响：WSO2 API Manager、WSO2 Open Banking IAM、WSO2 Open Bankin

N/A

N/A