{"id":"CVE-2025-13590","revision":"d25af2dc5ce24c3e8b7c4216bffc27af","records":[{"revision":"d25af2dc5ce24c3e8b7c4216bffc27af","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-13590","aliases":[],"title":"Authenticated arbitrary file upload via a System REST API requiring administrator permission.","description":"A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location within the deployment via a system REST API. Successful uploads may lead to remote code execution. \n\n By leveraging the vulnerability, a malicious actor may perform Remote Code Execution by uploading a specially crafted payload.","state":0,"publishedAt":"2026-02-19T10:05:06.083+00:00","modifiedAt":"2026-09-23T15:27:31.923+00:00","affected":[{"ecosystem":"Vendor product","name":"WSO2 API Manager","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"WSO2\",\n                    \"product\": \"WSO2 API Manager\",\n                    \"versions\": [\n                        {\n                            \"status\": \"unaffected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.2.0\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.2.0\",\n                            \"lessThan\": \"4.2.0.179\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.3.0\",\n                            \"lessThan\": \"4.3.0.91\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.4.0\",\n                            \"lessThan\": \"4.4.0.55\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.5.0\",\n                            \"lessThan\": \"4.5.0.38\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.6.0\",\n                            \"lessThan\": \"4.6.0.3\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"WSO2 API Control Plane","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"WSO2\",\n                    \"product\": \"WSO2 API Control Plane\",\n                    \"versions\": [\n                        {\n                            \"status\": \"unknown\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.5.0\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.5.0\",\n                            \"lessThan\": \"4.5.0.39\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.6.0\",\n                            \"lessThan\": \"4.6.0.3\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"WSO2 Universal Gateway","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"WSO2\",\n                    \"product\": \"WSO2 Universal Gateway\",\n                    \"versions\": [\n                        {\n                            \"status\": \"unknown\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.5.0\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.5.0\",\n                            \"lessThan\": \"4.5.0.37\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.6.0\",\n                            \"lessThan\": \"4.6.0.3\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"WSO2 Traffic Manager","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"WSO2\",\n                    \"product\": \"WSO2 Traffic Manager\",\n                    \"versions\": [\n                        {\n                            \"status\": \"unknown\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.5.0\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.5.0\",\n                            \"lessThan\": \"4.5.0.37\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.6.0\",\n                            \"lessThan\": \"4.6.0.3\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.impl","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"WSO2\",\n                    \"product\": \"org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.impl\",\n                    \"packageName\": \"org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.impl\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"9.28.116\",\n                            \"lessThan\": \"9.28.116.391\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"9.29.120\",\n                            \"lessThan\": \"9.29.120.210\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"9.30.67\",\n                            \"lessThan\": \"9.30.67.133\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"9.31.86\",\n                            \"lessThan\": \"9.31.86.100\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"9.32.147\",\n                            \"lessThan\": \"9.32.147.2\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"unaffected\",\n                            \"version\": \"9.32.167\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","score":9.1,"severity":"CRITICAL"}],"references":["https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4849/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-13590","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-13590","identifiers":["CVE-2025-13590"]},"retained":false,"historicalAffected":[]}],"coverage":[]}