Security Advisory

CVE-2023-6836

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-12-15 09:26:01
Last updated 2024-08-02 08:42:08
Assigner WSO2
State PUBLISHED

Description

Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access sensitive information.