VulnSea

org.wso2.carbon.identity.oauth.common vulnerabilities

CVEs whose affected-version data names the org.wso2.carbon.identity.oauth.common package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-6423Medium· 4.0
today

Sensitive Data Exposure via URL Parameters in Multiple WSO2 Products Allows Confidential Information Leakage

The product failed to enforce validation constraints on user-supplied input in URL parameters, allowing sensitive data to be passed to flows where it was not intended to be processed. Although the product did not utilize this data, its a…

▾ SunlitWSO2 · WSO2 API Managervia CVEORG
org.wso2.carbon.identity.oauth.common vulnerabilities (CVEs) · VulnSea