CVE-2024-7074

An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user input in SOAP admin services. A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location on the server. By leveraging this vulnerability, an attacker could upload a specially crafted payload, potentially achieving remote code execution (RCE) on the server. Exploitation requires valid admin credentials, limiting its impact to authorized but potentially malicious users.

CVSS v3 6.8 MEDIUM

6.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2024-3566/

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Existe una vulnerabilidad de carga de archivos arbitrarios en varios productos WSO2 debido a la validación incorrecta de la entrada del usuario en los servicios de administración SOAP. Un agente malicioso con privilegios administrativos puede cargar un archivo arbitrario en una ubicación del servidor controlada por el usuario. Al aprovechar esta vulnerabilidad, un atacante podría cargar una carga útil especialmente manipulada, lo que podría provocar una ejecución remota de código (RCE) en el servidor. Su explotación requiere credenciales de administrador válidas, lo que limita su impacto a usuarios autorizados, pero potencialmente maliciosos.

02 Jun 2025, 17:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-06-02 17:15

Updated : 2026-06-17 08:19

NVD link : CVE-2024-7074

Mitre link : CVE-2024-7074

CVE.ORG link : CVE-2024-7074

JSON object : View

Products Affected

No product.

CWE

CWE-434

Unrestricted Upload of File with Dangerous Type

{"id": "CVE-2024-7074", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-7074", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-06-02T17:04:40.480620Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.9}]}, "affected": [{"source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "affectedData": [{"vendor": "WSO2", "product": "WSO2 Enterprise Integrator", "versions": [{"status": "unknown", "version": "0", "lessThan": "6.0.0", "versionType": "custom"}, {"status": "affected", "version": "6.0.0", "lessThan": "6.0.0.21", "versionType": "custom"}, {"status": "affected", "version": "6.1.0", "lessThan": "6.1.0.38", "versionType": "custom"}, {"status": "affected", "version": "6.1.1", "lessThan": "6.1.1.42", "versionType": "custom"}, {"status": "affected", "version": "6.2.0", "lessThan": "6.2.0.61", "versionType": "custom"}, {"status": "affected", "version": "6.3.0", "lessThan": "6.3.0.69", "versionType": "custom"}, {"status": "affected", "version": "6.4.0", "lessThan": "6.4.0.96", "versionType": "custom"}, {"status": "affected", "version": "6.5.0", "lessThan": "6.5.0.102", "versionType": "custom"}, {"status": "affected", "version": "6.6.0", "lessThan": "6.6.0.198", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 API Manager", "versions": [{"status": "unknown", "version": "0", "lessThan": "2.0.0", "versionType": "custom"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.0.28", "versionType": "custom"}, {"status": "affected", "version": "2.1.0", "lessThan": "2.1.0.38", "versionType": "custom"}, {"status": "affected", "version": "2.2.0", "lessThan": "2.2.0.57", "versionType": "custom"}, {"status": "affected", "version": "2.5.0", "lessThan": "2.5.0.83", "versionType": "custom"}, {"status": "affected", "version": "2.6.0", "lessThan": "2.6.0.143", "versionType": "custom"}, {"status": "affected", "version": "3.0.0", "lessThan": "3.0.0.162", "versionType": "custom"}, {"status": "affected", "version": "3.1.0", "lessThan": "3.1.0.293", "versionType": "custom"}, {"status": "affected", "version": "3.2.0", "lessThan": "3.2.0.384", "versionType": "custom"}, {"status": "affected", "version": "3.2.1", "lessThan": "3.2.1.16", "versionType": "custom"}, {"status": "affected", "version": "4.0.0", "lessThan": "4.0.0.305", "versionType": "custom"}, {"status": "affected", "version": "4.1.0", "lessThan": "4.1.0.166", "versionType": "custom"}, {"status": "affected", "version": "4.2.0", "lessThan": "4.2.0.100", "versionType": "custom"}, {"status": "affected", "version": "4.3.0", "lessThan": "4.3.0.16", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Enterprise Service Bus", "versions": [{"status": "affected", "version": "4.9.0", "lessThan": "4.9.0.10", "versionType": "custom"}, {"status": "affected", "version": "5.0.0", "lessThan": "5.0.0.28", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Enterprise Mobility Manager", "versions": [{"status": "affected", "version": "2.2.0", "lessThan": "2.2.0.27", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Micro Integrator", "versions": [{"status": "unknown", "version": "0", "lessThan": "1.0.0", "versionType": "custom"}, {"status": "affected", "version": "1.0.0", "lessThan": "1.0.0.49", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Open Banking AM", "versions": [{"status": "unknown", "version": "0", "lessThan": "1.3.0", "versionType": "custom"}, {"status": "affected", "version": "1.3.0", "lessThan": "1.3.0.132", "versionType": "custom"}, {"status": "affected", "version": "1.4.0", "lessThan": "1.4.0.135", "versionType": "custom"}, {"status": "affected", "version": "1.5.0", "lessThan": "1.5.0.137", "versionType": "custom"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.0.342", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Carbon Synapse Artifact Uploader BE", "versions": [{"status": "affected", "version": "4.4.10", "lessThan": "4.4.10.3", "versionType": "custom"}, {"status": "affected", "version": "4.6.1", "lessThan": "4.6.1.4", "versionType": "custom"}, {"status": "affected", "version": "4.6.6", "lessThan": "4.6.6.9", "versionType": "custom"}, {"status": "affected", "version": "4.6.10", "lessThan": "4.6.10.4", "versionType": "custom"}, {"status": "affected", "version": "4.6.16", "lessThan": "4.6.16.2", "versionType": "custom"}, {"status": "affected", "version": "4.6.19", "lessThan": "4.6.19.10", "versionType": "custom"}, {"status": "affected", "version": "4.6.64", "lessThan": "4.6.64.2", "versionType": "custom"}, {"status": "affected", "version": "4.6.67", "lessThan": "4.6.67.15", "versionType": "custom"}, {"status": "affected", "version": "4.6.89", "lessThan": "4.6.89.12", "versionType": "custom"}, {"status": "affected", "version": "4.6.105", "lessThan": "4.6.105.59", "versionType": "custom"}, {"status": "affected", "version": "4.6.150", "lessThan": "4.6.150.11", "versionType": "custom"}, {"status": "affected", "version": "4.7.20", "lessThan": "4.7.20.5", "versionType": "custom"}, {"status": "affected", "version": "4.7.30", "lessThan": "4.7.30.42", "versionType": "custom"}, {"status": "affected", "version": "4.7.35", "lessThan": "4.7.35.5", "versionType": "custom"}, {"status": "affected", "version": "4.7.61", "lessThan": "4.7.61.56", "versionType": "custom"}, {"status": "affected", "version": "4.7.99", "lessThan": "4.7.99.299", "versionType": "custom"}, {"status": "affected", "version": "4.7.131", "lessThan": "4.7.131.15", "versionType": "custom"}, {"status": "affected", "version": "4.7.175", "lessThan": "4.7.175.18", "versionType": "custom"}, {"status": "affected", "version": "4.7.188", "lessThan": "4.7.188.5", "versionType": "custom"}, {"status": "affected", "version": "4.7.204", "lessThan": "4.7.204.5", "versionType": "custom"}, {"status": "unaffected", "version": "4.7.216", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.artifactuploader", "defaultStatus": "unknown"}]}], "published": "2025-06-02T17:15:36.250", "references": [{"url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2024-3566/", "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "description": [{"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user input in SOAP admin services. A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location on the server.\n\nBy leveraging this vulnerability, an attacker could upload a specially crafted payload, potentially achieving remote code execution (RCE) on the server. Exploitation requires valid admin credentials, limiting its impact to authorized but potentially malicious users."}, {"lang": "es", "value": "Existe una vulnerabilidad de carga de archivos arbitrarios en varios productos WSO2 debido a la validaci\u00f3n incorrecta de la entrada del usuario en los servicios de administraci\u00f3n SOAP. Un agente malicioso con privilegios administrativos puede cargar un archivo arbitrario en una ubicaci\u00f3n del servidor controlada por el usuario. Al aprovechar esta vulnerabilidad, un atacante podr\u00eda cargar una carga \u00fatil especialmente manipulada, lo que podr\u00eda provocar una ejecuci\u00f3n remota de c\u00f3digo (RCE) en el servidor. Su explotaci\u00f3n requiere credenciales de administrador v\u00e1lidas, lo que limita su impacto a usuarios autorizados, pero potencialmente maliciosos."}], "lastModified": "2026-06-17T08:19:18.810", "sourceIdentifier": "ed10eef1-636d-4fbe-9993-6890dfa878f8"}