CVE:CVE-2022-29464
CNNVD:CNNVD-202204-3737
WSO2 API Manager是美国WSO2公司的一套API生命周期管理解决方案。
WSO2 API Manager 存在路径遍历漏洞，该漏洞允许无限制的文件上传和远程代码执行。
solution:Upgrade wso2 api_manager to a higher version than 4.0.0,and avoid the version [2.2.0,4.0.0]; Upgrade wso2 enterprise_integrator to a higher version than 6.6.0,and avoid the version [6.2.0,6.6.0]; Upgrade wso2 identity_server to a higher version than 5.11.0,and avoid the version [5.2.0,5.11.0]; Upgrade wso2 identity_server_analytics to a higher version than 5.4.0,5.4.1,5.5.0,5.6.0,and avoid the version 5.4.0,5.4.1,5.5.0,5.6.0; Upgrade wso2 identity_server_as_key_manager to a higher version than 5.10.0,and avoid the version [5.3.0,5.10.0]