CVE-2025-2905 | WSO2 API Manager up to 2.0.0 XML Parser xml external entity reference

A vulnerability, which was classified as critical, has been found in WSO2 API Manager up to 2.0.0. Affected by this issue is some unknown functionality of the component XML Parser. The manipulation leads to xml external entity reference. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is handled as CVE-2025-2905. The attack may be launched remotely. There is no exploit available.