Description
The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks.
Remediation
References
https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0742
Related Vulnerabilities
CVE-2022-43430 Vulnerability in maven package com.compuware.jenkins:compuware-topaz-for-total-test
CVE-2016-8609 Vulnerability in maven package org.keycloak:keycloak-core
CVE-2020-10776 Vulnerability in maven package org.keycloak:keycloak-parent
CVE-2011-4905 Vulnerability in maven package org.apache.activemq:activemq-core
CVE-2020-2166 Vulnerability in maven package de.taimos:pipeline-aws