Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2022-29464

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a ../../../../repository/deployment/server/webapps directory. This affects WSO2 API Manager 2.2.0 up to 4.0.0, WSO2 Identity Server 5.2.0 up to 5.11.0, WSO2 Identity Server Analytics 5.4.0, 5.4.1, 5.5.0 and 5.6.0, WSO2 Identity Server as Key Manager 5.3.0 up to 5.11.0, WSO2 Enterprise Integrator 6.2.0 up to 6.6.0, WSO2 Open Banking AM 1.4.0 up to 2.0.0 and WSO2 Open Banking KM 1.4.0, up to 2.0.0.

CVSS 9.8 · CriticalBuzz score 68.4KEV listed3 public exploit repository references

Buzz score

Why this CVE is surfacing

Buzz score total 68.4

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 13.9 · diversity 11.5 · KEV 25.0 · OTX 0.0 · PoC 18.0
Mention score
13.9
3 evidence mentions in the snapshot
Diversity score
11.5
3 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
18.0
3 repos · best confidence 0.99
Best PoC traction
1253
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
3 source links · newest first
  • Some of TOP universities wouldn’t pass cybersecurity exam: left websites vulnerableSecurity Affairs

    CyberNews researchers discovered that many universities worldwide are leaking sensitive information and are even open to full takeover. Many universities worldwide, including some of the most prestigious, leave their webpages unpatched, leaking sensitive information, and even open to full takeovers, a Cybernews Research team investigation reveals. Among the 20 cases found, at least six websites […]

    newssecurityaffairs.comSep 11, 2023, 7:37 AM
  • Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, Cross-Site Scripting and MoreUnit42

    Recent exploits observed in the wild are highlighted based on the availability of proofs of concept, the severity of the vulnerabilities the exploits are based on and the ease of exploitation.

    vendorunit42.paloaltonetworks.comAug 19, 2022, 11:00 PM
  • Organizations Warned of Attacks Exploiting WSO2 VulnerabilitySecurityWeek

    Products made by enterprise software development solutions provider WSO2 are affected by a critical vulnerability that has been exploited in the wild. According to WSO2’s website, its products are used by many major companies worldwide, including Fortune 500 firms, which could all be at risk.

    newswww.securityweek.comApr 26, 2022, 10:41 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

3 repository references · best confidence 0.99 · max 1253 stars
  • W01fh4cker/SereinHigh confidence
    githubDiscovery source unavailable1253 starsDiscovered Jul 9, 2026, 1:19 AM
  • W01fh4cker/Serein_LinuxHigh confidence
    githubDiscovery source unavailable49 starsDiscovered Jul 9, 2026, 1:19 AM
  • sh4den/CVE-2022-29464High confidence
    githubDiscovery source unavailable11 starsDiscovered Jul 9, 2026, 1:19 AM

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence