CVE-2020-24590 – The Management Console in WSO2 API Manager through 3.1.0 and API Microgat

The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24590

Reference (s):

• https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0742