Threats tagged 'ghsa-mg7h-mgjw-mg5g'

An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper input validation in the CarbonAppUploader admin service endpoint. An authenticated attacker with administrative privileges can upload malicious files to user-controlled locations on the server, potentially enabling remote code execution. Exploitation requires valid admin credentials, and the vulnerability has a medium severity rating with a CVSS score of 6.7.