critical9.1
CVE-2020-24589
The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks.
Impact
The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wso2 | Api Manager | through 3.1.0 |
| Wso2 | Api Microgateway | Version 2.2.0 |