CVE-2019-6513: Malicious File Upload
Published May 21, 2019
·Updated
An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extension to an allowed one.
Affected Software
1 affected component
WSO2 API Manager=2.6.0
Event History
May 21, 2019
CVE Published
via MITRE·09:34 PM
Data Sourced
via MITRE·09:34 PM
Description
Data Sourced
via NVD·10:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2019-6513?
CVE-2019-6513 is a vulnerability discovered in WSO2 API Manager 2.6.0.
2
How severe is CVE-2019-6513?
CVE-2019-6513 has a severity rating of medium (5.4).
3
What is the impact of CVE-2019-6513?
CVE-2019-6513 allows a logged-in user to upload any type of file as API documentation by changing the file extension to an allowed one.
4
How can I fix CVE-2019-6513?
To fix CVE-2019-6513, update to a version of WSO2 API Manager that is not affected by the vulnerability.
5
Is there any additional information available on CVE-2019-6513?
Yes, you can find more information about CVE-2019-6513 in this advisory: [link].