CVE-2024-10302

Name of the Vulnerable Software and Affected Versions WSO2 products (affected versions not specified)

Description The user self-signup flow fails to adequately validate user-supplied input, allowing arbitrary unvalidated data to be included within user claims. These claims are subsequently used by downstream processes. This flaw can lead to security risks such as content manipulation, redirection, user interface inconsistencies, unauthorized actions, and data exposure, depending on how the compromised data is consumed and the privileges of the affected users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.