PT-2023-32786 · Wso2+1 · Wso2 Api Manager+6
CVE-2023-6838
·
Publicado
2023-12-15
·
Atualizado
2023-12-19
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Software (affected versions not specified)
Description
A Reflected XSS issue can be exploited by tampering with a request parameter in the "Authentication Endpoint". This can be performed in both authenticated and unauthenticated requests.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Wso2 Api Manager
Wso2 Is As Key Manager
Wso2 Identity Server
Aimanager
Identityserver
Identity Server As Key Manager
Product-Apim