VulnSea

org.wso2.carbon.identity.handler.event.account.lock vulnerabilities

CVEs whose affected-version data names the org.wso2.carbon.identity.handler.event.account.lock package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-7478Medium· 5.8
today

Username Enumeration via External User Stores in Multiple WSO2 Products Allows User Account Discovery

When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or validity of usernames during authentication attempts. This oversight allows an attacker to repeatedly query the auth…

▾ SunlitWSO2 · WSO2 API Managervia CVEORG
org.wso2.carbon.identity.handler.event.account.lock vulnerabilities (CVEs) · VulnSea