← All credits
Thilan Dissanayaka
3 vulnerability records and advisories credit this contributor.
CVE-2026-3415
XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of Service
CVE-2026-3418
Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution
CVE-2025-13590
Authenticated arbitrary file upload via a System REST API requiring administrator permission.