PT-2023-32784 · Wso2 · Wso2

CVE-2023-6835

Publicado

2023-12-15

Atualizado

2023-12-28

CVSS v3.1

4.3

Média

Vetor

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions WSO2 products (affected versions not specified)

Description The issue is related to a lack of server-side input validation in the Forum feature, which could allow API rating manipulation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2023-6835

GHSA-W7RX-824V-RGX5

Wso2