CVE-2023-6836 (published 2023-12-15T09:26:01.323Z)
Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access sensitive information.
Affected products: Vendor: WSO2
Product: WSO2 API Manager 
Versions: 0, 3.0.0.0