XML External Entity (XXE) Vulnerability Identified in Multiple WSO2 Products

CVE-2023-6836 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access sensitive information.

Learn more about our External Network Penetration Testing.