CVE-2025-1862
An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user-supplied filenames in the BPEL uploader SOAP service endpoint. A malicious actor with administrative privileges can upload arbitrary files to a user-controlled location on the server.
By leveraging this vulnerability, an attacker can upload a specially crafted payload and achieve remote code execution (RCE), potentially compromising the server and its data.
By leveraging this vulnerability, an attacker can upload a specially crafted payload and achieve remote code execution (RCE), potentially compromising the server and its data.
Vendor
Product
CWE
Yayın Tarihi
2025-09-26 09:15:31
Güncelleme
2025-10-06 13:43:41
Source Identifier
ed10eef1-636d-4fbe-9993-6890dfa878f8
KEV Date Added
-