CVE-2019-15108

An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457

Low · published August 16, 2019

CVSS v3.0
3.5
EPSS
1%
Percentile
49.6
In the wild
Unconfirmed
What it is

An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature of the event simulator component.

The record
Technical detail
CVSS v3.0
3.5 · LOW
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00631 · 49.6th percentile
Published
2019-08-16T03:07Z
EPSS history
Timeline
  • 16 AUG 03:07Z
    An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457
    cvelistv5