WSO2 API Manager 3.0.0 does not properly restrict outbound network access from a Publisher node, opening up the possibility of SSRF to this node's entire intranet.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.wso2.am:am-parent(Maven) | 0 | N/A | N/A |
CVSS Metrics
