WSO2 org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.impl

• CVE-2025-13590 Critical 9.1 Authenticated arbitrary file upload via a System REST API requiring administrator permission. 0.8%