Threats tagged 'ghsa-fc89-q8rg-m49m'

Multiple WSO2 products have an arbitrary file upload vulnerability due to insufficient validation of uploaded content and destination in SOAP admin services. This flaw allows a malicious user with administrative privileges to upload crafted files to user-controlled locations within the deployment. Exploitation can lead to remote code execution on the server depending on how the uploaded file is processed. By default, only users with administrative access to the affected SOAP services can exploit this vulnerability.