CVE

CVE-2022-29464

P1⬤ KNOWN RANSOMWARE USE

WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

WSO2 · Multiple Products

Date added (CISA)

2022-04-25

Remediation due

2022-05-16

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.