Actively exploited vulnerability

CVE-2022-29464: WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.

CISA KEV source 25 Apr 2022 added 16 May 2022 remediation due

WSO2 · Multiple Products

Known ransomware use: Known

Apply updates per vendor instructions.

Trend Micro Research, News and Perspectives31 May 2022

Users of WSO2 products are advised to update their respective products and platforms or to apply the temporary mitigation steps immediately.

Affected product