org.wso2.carbon.user.mgt.ui vulnerabilities

CVEs whose affected-version data names the org.wso2.carbon.user.mgt.ui package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-5139Medium· 6.1

today

Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Enables UI Manipulation and Redirection

The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malicious JavaScript payloads. This vulnerability can be triggered by submitting crafted input to the Authentication Endpo…

▾ SunlitWSO2 · WSO2 Enterprise Integratorvia CVEORG