CVE-2024-2374 | WSO2 API Manager XML Parser xml external entity reference

A vulnerability marked as problematic has been reported in WSO2 API Manager, Identity Server, Open Banking AM, Open Banking IAM and Identity Server as Key Manager. Affected by this vulnerability is an unknown functionality of the component XML Parser. This manipulation causes xml external entity reference.

This vulnerability is tracked as CVE-2024-2374. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.