org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.store.configuration.ui vulnerabilities

CVEs whose affected-version data names the org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.store.configuration.ui package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-8008Medium· 5.2

1y ago

Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products via JDBC User Store Connection Validation

A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to insufficient output encoding in error messages generated by the JDBC user store connection validation request. A malicious actor can inject a sp…

▾ SunlitWSO2 · WSO2 Enterprise IntegratorEPSS 0.53%via CVEORG