← Back to browse · API

CVE-2020-24589

Severity

CRITICAL

CVSS

9.1

EPSS

0.26282

Risk score

45.6

CISA KEV

No

PoC

No

Published

2020-08-21

Modified

2024-08-04

First seen

2026-08-07

Aliases

EUVD-2020-17306, GHSA-6C4Q-J8WJ-WF2X

Products

n/a:n/a n/a

Sources

euvd EUVD-2020-17306

Description

The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks.

References