← CVE Intelligence

CVE-2023-6838

WSO2 / WSO2 API Manager PUBLISHED

Description (CNA)

Reflected XSS vulnerability can be exploited by tampering a request parameter in Authentication Endpoint. This can be performed in both authenticated and unauthenticated requests.

Affected (CNA)

Vendor / productVersions
WSO2 / WSO2 API Managerunknown 0 before 3.1.0.0; affected 3.1.0.0 before 3.1.0.14; affected 3.2.0.0 before 3.2.0.10
WSO2 / WSO2 Identity Serverunknown 0 before 5.10.0.0; affected 5.10.0.0 before 5.10.0.5
WSO2 / WSO2 IS as Key Managerunknown 0 before 5.10.0.0; affected 5.10.0.0 before 5.10.0.5

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.