What’s Vulnerable › Vulnerabilities

CVE-2019-6513

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-21 · updated 2026-06-17
• Weakness: CWE-434

Description

An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extension to an allowed one.

Affected products

• WSO2 API Manager: 2.6.0

References

• https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-6513
• https://www.excellium-services.com/cert-xlm-advisory
• https://www.excellium-services.com/cert-xlm-advisory/cve-2019-6513/
• https://www.excellium-services.com/cert-xlm-advisory
• https://www.excellium-services.com/cert-xlm-advisory/cve-2019-6513/

Get alerted when CVE-2019-6513 or the next vulnerability affects your stack