← CVE Intelligence

CVE-2023-6835

WSO2 / WSO2 API Manager PUBLISHED

Description (CNA)

Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be manipulated.

Affected (CNA)

Vendor / productVersions
WSO2 / WSO2 API Managerunknown 0 before 2.2.0.0; affected 2.2.0.0 before 2.2.0.16; affected 2.5.0.0 before 2.5.0.17; affected 2.6.0.0 before 2.6.0.24
WSO2 / WSO2 IoT Serverunknown 0 before 3.3.1.0; affected 3.3.1.0 before 3.3.1.17

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.