CVE-2022-29464—WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

PUBLISHEDvulnerability record
2022-04-25 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2022-29464
Project:
WSO2
Product:
Multiple Products
Date Added:
2022-04-25
Due Date:
2022-05-16
Last Updated:
June 21, 2025

Vulnerability Name

WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

Description

Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2022-29464

Related Weaknesses

browse all CVEs