Description
The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks.
Remediation
References
https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0742
Related Vulnerabilities
CVE-2020-6449 Vulnerability in npm package electron
CVE-2022-22965 Vulnerability in maven package org.springframework.boot:spring-boot-starter-webflux
CVE-2023-28155 Vulnerability in npm package request
CVE-2013-1921 Vulnerability in maven package org.picketbox:jbosssx
CVE-2018-1000600 Vulnerability in maven package com.coravy.hudson.plugins.github:github