CVE-2025-10907
Last modified
CVE-2025-10907 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the deployment. Successful exploitation may lead to remote code execution (RCE) on the server, depending on how the uploaded file is processed. EPSS estimates a 0.49% chance of exploitation in the next 30 days.
Description
An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the deployment. Successful exploitation may lead to remote code execution (RCE) on the server, depending on how the uploaded file is processed. By default, this vulnerability is only exploitable by users with administrative access to the affected SOAP services.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wso2 | Api Control Plane | 4.5.0 |
| Wso2 | Api Manager | 3.1.0 |
| Wso2 | Api Manager | 3.2.0 |
| Wso2 | Api Manager | 3.2.1 |
| Wso2 | Api Manager | 4.0.0 |
| Wso2 | Api Manager | 4.1.0 |
| Wso2 | Api Manager | 4.2.0 |
| Wso2 | Api Manager | 4.3.0 |
| Wso2 | Api Manager | 4.4.0 |
| Wso2 | Api Manager | 4.5.0 |
| Wso2 | Enterprise Integrator | 6.6.0 |
| Wso2 | Identity Server | 5.10.0 |
| Wso2 | Identity Server | 5.11.0 |
| Wso2 | Identity Server | 6.0.0 |
| Wso2 | Identity Server | 6.1.0 |
| Wso2 | Identity Server | 7.0.0 |
| Wso2 | Identity Server | 7.1.0 |
| Wso2 | Identity Server As Key Manager | 5.10.0 |
| Wso2 | Open Banking Am | 2.0.0 |
| Wso2 | Open Banking Iam | 2.0.0 |
| Wso2 | Traffic Manager | 4.5.0 |
| Wso2 | Universal Gateway | 4.5.0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-10907?
How severe is CVE-2025-10907?
How do I fix CVE-2025-10907?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-10900AA maliciously crafted MODEL file, when parsed through certa…7.8
- CVE-2025-10901The Originality.ai AI Checker plugin for WordPress is vulner…4.3
- CVE-2025-10902The Originality.ai AI Checker plugin for WordPress is vulner…4.3
- CVE-2025-10904Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2025-10905Collision in MiniFilter driver in Avast Software Avast Free …4.4
- CVE-2025-10906A flaw has been found in Magnetism Studios Endurance up to 3…8.4
- CVE-2025-10908Due to a lack of user account state validation during authen…7.3
- CVE-2025-10909A security flaw has been discovered in Mangati NovoSGA up to…2.4
- CVE-2025-1091A Broken Authorization schema exists where any authenticated…4.3
- CVE-2025-10910A flaw in the binding process of Govee’s cloud platform and …9.3
- CVE-2025-10911A use-after-free vulnerability was found in libxslt while pa…5.5
- CVE-2025-10912Authorization Bypass Through User-Controlled Key vulnerabili…5.4
Are you affected by CVE-2025-10907?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST